An agent-based approach for building an intrusion detection system

In a network environment, intrusion detection is the act of detecting actions that attempt to compromise the confidentiality, integrity or availability of a resource. Due to increasing incidents of cyber-attacks, building intrusion detection systems (IDSs) remains a priority for protecting information systems security. Intrusion detection does not include prevention of intrusions. IDS should be fast enough to catch different types of intruders (external or internal intruders) before harm is done. Developing and implementing IDS is a complex task of knowledge engineering that requires an elaborate infrastructure. Modern technology such intelligent agents and data mining are appropriate to be used in network security. In this paper, a multi agent based approach is used for network intrusion detection using data mining concept.