TJIDS: an intrusion detection architecture for distributed network

We present TJIDS (Tianjin intrusion detection system), a network intrusion detection system whose main functionality is to detect and respond to malicious attacks in distributed network. The main novelty in TJIDS is its intelligent distributed agent architecture to enable distributed intrusion detection with dynamic policy change, as the treat pattern changes. We have adopted a multilevel agent technique, and applied genetic algorithm to this agent-based intrusion detection system. The advantage of our architecture is its ability to perform dynamic policy update in intrusion detection system through wireless net gate, and respond intrusions by distributed agents. Key concepts and preliminary results are presented.