Optimization of Two-Level Topological Structure of Distributed Intrusion Detection System

The paper is devoted to discuss selected issues of distributed intrusion detection system composed of two complementary parts: distributed monitoring system and distributed decision making system. The aim of the paper is to formulate and investigate various aspects of distributed monitoring system optimization. The discussed optimization tasks are motivated by assumption that quality of decision making are strongly depends on quality of monitoring services delivered to decision making system by distributed monitoring system. It is further assumed that the quality of monitoring services is measured by index combining amount of delivered data and delay introduced for transferred the monitoring data by co-shared distributed communication system. Distributed monitoring system for layered distributed intrusion detection system optimization tasks are discussed.