Strengthen the security of CONFIDANT by using attribute-policy handshake

Recently, an intrusion detection system which named CONFIDANT was proposed, which utilized file integrity analyzers and mobile agent for intrusion detection and aimed to detection of malicious activity by insiders. Shi et al proposed CONFIDANT has vulnerabilities in security aspect, so they integrated a clone agent protocol into CONFIDANT in 2009. Because of Shi et al´s protocol´s high communication cost, we proposed a new attribute-policy handshake structure for CONFIDANT to protect agents and strengthen its security even though there are a few malicious platforms.