MA_IDS : Mobile Agents for Intrusion Detection System

In this paper we aim at presenting an implementation of a new MA_IDS (mobile agent for intrusion detection system) model, based on misuse approach. Through its ease to detect simulated attacks, we show that the use of mobile agents has practical advantages for intrusion detection. Based on a set of simulated intrusions, we established a comparative experimental study of four IDSs, showing that most of current IDS are generally centralized and suffer from significant limitations when used in high speed networks, especially when they face distributed attacks. This leads us to use distributed model based on mobile agents paradigm. We believe that agent will help collecting efficient and useful information for IDS.