Multiagent network security system using FIPA-OS

Describes a security framework in distributed systems where an intelligent agent handles the security monitoring at each host. The agents are made responsible for alerting the system administrators about an attempted intrusion or misuse of a particular system. Recently, there has been an increase in the number of reports of such attacks, which are widespread across the network and affect a chain of systems before they attack the actual target system. To detect such attacks, the amount of information associated within a single isolated system is inadequate for an agent to confirm an intrusion. Therefore, the need is emphasized for a framework that allows the agents to negotiate with their co-agents in order to share information about an intrusion, thereby aiding in the effective handling of intrusion detection. Our design aims at developing such a framework in the FIPA-OS (Foundation for Intelligent Physical Agents - Open Source) environment, which provides most of the source code for building agents on its platform. The concept of mutual co-operation among agents has been developed as a means of querying. These queries are carried out by tasks associated with each agent. The protocols to support these interactions by means of the queries are explained. The issues and requirements involved in standardizing formats, interaction protocols and architectures to co-manage intrusion detection are discussed.