Intrusion detection is the problem of identifying unauthorized use, misuse, and abuse of computer systems by both system insiders and external intruders. The proliferation of heterogeneous computer networks provides additional implications for the intrusion detection problem. Namely, the increased connectivity of computer systems gives greater access to outsiders, and makes it easier for intruders to avoid detection. This paper explores a prototype Distributed Intrusion Detection System (DIDS) that combines distributed monitoring and data reduction with centralized data analysis to monitor a heterogeneous network of computers.
We also explore the possibility of bringing Intelligence to Distributed intrusion Detection Systems. An Intrusion Detection System always helps the “second in the queue”, in other words; any Detection System can only say that there is an attack which is ongoing. Now based on the facts delivered from them, the second attempt (or may be the 100th attempt) may be neutralized. Now what is there that is missing in these algorithms? Answer is simple, Intelligence! Gone are the days where a computer is thought to be a piece of toy which will just do what you ask it to do. Time demands more than that, and so is the topic of bringing intelligence to Intrusion Detection Systems than to go with traditional Detection Systems............
DOWNLOAD PAPER :