Authors:
Muhammad Awais Shibli
1
and
Sead Muftic
2
Affiliations:
1
NUST School of Electrical Engineering and Computer Sciences; The Royal Institute of Technology (KTH), Sweden
;
2
The Royal Institute of Technology (KTH), Sweden
Keyword(s):
Intrusion Detection and Vulnerability Assessment, Intrusion Detection & Prevention, Secure Mobile Agents, Mobile System Security, Mobile Code & Agent.
Related
Ontology
Subjects/Areas/Topics:
Information and Systems Security
;
Intrusion Detection & Prevention
Abstract:
The paper describes design and architecture of the intrusion detection and prevention system based on secure mobile agents along with the analysis of commercial products and current research efforts in the area. Once system will be operational it will be the first comprehensive real–life application using mobile agents that will not only provide security to network resources but also provide security and protection to the mobile agents system itself. The system efficiently solves several problems with the existing IDS/IPS solutions: it can detect new vulnerabilities, it can process and filter large volumes of logs, it reacts to intrusions in real–time, provides protection against unknown attacks, supports and improves IDS/IPS commercial products by different vendors, and handles software patches. The system not only improves the existing IDS/IPS solutions, but it also eliminates several of their core problems. In addition, it is self– protected by full encryption, both mobile agents
and their platforms, and therefore not vulnerable to attacks against its own components and resources.
(More)