Mobile Agent Based Cooperative Intrusion Detection System and Minimization of Malicious Packet Losses

Abstract

Networks have the problem of security attacks like denial of service attacks and others. The firewalls and encrypted software’s does not provide a complete security solution for those attacks. Networks routinely drops packets when the load exceeds buffering capabilities. It is a challenge to differentiate packets lost due to congestion and due to a compromised router maliciously manipulating its stream of packets. In this paper, we have proposed an effective Intrusion Detection System in which local agent collects data from its own system and it classifies anomaly behaviors using SVM classifier. The mobile agent gathers information from the local agent before it allows the system to send data. The packet loss minimization algorithm differentiates packet losses due to malicious actions based on measured traffic rates and buffer sizes. Our system identifies successful attacks from the anomaly behaviors and helped to reduce the packet losses due to malicious action of the routers. In this paper the architecture of the proposed system is described, a theoretical analysis of agents’ behavior is given and its possible extensions are explained.