Title :
Collaborative intrusion detection system
Author :
Miller, Patrick ; Inoue, Atsushi
Author_Institution :
Dept. of Comput. Sci., Eastern Washington Univ., Cheney, WA, USA
Abstract :
This paper presents an intrusion detection system consisting of multiple intelligent agents. Each agent uses a self-organizing map (SOM) in order to detect intrusive activities on a computer network. A blackboard mechanism is used for the aggregation of results generated from such agents (i.e. a group decision). In addition, this system is capable of reinforcement learning with the reinforcement signal generated within the blackboard and then distributed over all agents which are involved in the group decision making. Systems with various configurations of agents are evaluated for criteria such as speed, accuracy, and consistency. The results indicate an increase in classification accuracy as well as in its constancy as more sensors are incorporated. Currently this system is primarily tested on the data set for KDD Cup ´99.
Keywords :
blackboard architecture; computer networks; data mining; decision making; learning (artificial intelligence); multi-agent systems; security of data; self-organising feature maps; KDD Cup ´99; SOM; blackboard mechanism; computer network; group decision making; intrusion detection system; knowledge discovery in database cup; multiple intelligent agents; reinforcement learning; self-organizing map; Collaboration; Computer networks; Computer science; Data security; Frequency estimation; Intelligent agent; Intrusion detection; Learning; Signal generators; Velocity measurement;
Conference_Titel :
Fuzzy Information Processing Society, 2003. NAFIPS 2003. 22nd International Conference of the North American
Print_ISBN :
0-7803-7918-7
DOI :
10.1109/NAFIPS.2003.1226839
