Multi-agents Architecture for Distributed Intrusion Detection

Abstract—The growing concern about information security in computer networks is responsible for constantly producing new ways to defend them. This work describes the proposal for an Intrusion Detection System architecture that uses agents and an ontology for sharing information. Mobile agents provide a convenient way to distribute the detection process, enabling peer to peer cooperation between network nodes. The ontology provides an organized way of storing and sharing knowledge. To evaluate the proposed solution, the architecture has been implemented using the Java programming languag