In this work, we propose a novel Network Intrusion Detection Systems (NIDSs) architecture utilizing the misuse detection approach. This Network Intrusion Detection System architecture utilizes misuse detection agent. The proposed misuse detection agent adopts the novel framework by using Java Expert System Shell (JESS) and Snort rules along with the integration of multi agents. This approach achieves efficient misuse detection by detecting various types of network attacks and improves system performance. This approach introduces the framework for the network database security by implementation of a real time monitoring system using multi-agents. The NIDS uses the set of rules which defines the misuse behavior of user. This rule generation system is used based on JESS and Snort rules in order to use the rules for well known attacks and then taking the further decisions depended on multi-agents before intrusion occurs.
[1]
K. Tamine,et al.
Intelligent Agents for Distributed Intrusion Detection System
,
2007
.
[2]
Vasant Honavar,et al.
Lightweight agents for intrusion detection
,
2003,
J. Syst. Softw..
[3]
Aijaz Ahmed,et al.
Signature-based Network Intrusion Detection System using JESS (SNIDJ)
,
2005,
EuroIMSA.
[4]
Fabio Bellifemine,et al.
Developing Multi-agent Systems with JADE
,
2007,
ATAL.
[5]
Amparo Alonso-Betanzos,et al.
A Snort-based agent for a JADE multi-agent intrusion detection system
,
2009,
Int. J. Intell. Inf. Database Syst..
[6]
Allam Appa Rao,et al.
A Java Based Network Intrusion Detection System (IDS)
,
2006
.