Mohd Afizi Mohd Shukran

Agent Based Snort in Distributed Environment Mohd Afizi Mohd Shukran

Intrusion Detection System (IDS) is used to detect intrusion and then alert the system administrator about the intrusion. This is what traditional IDS is all about. It is then up to the system administrator to deal with the intrusion. Human intervention is still needed when it comes to dealing with intrusion. This is because traditional IDS could only detect the intrusion but could not, on its own respond towards the intrusion. IDS is only able to alert the system administrator when it detects an intrusion. How and when the intrusion is dealt with is up to the system administrator. Human intervention when dealing with intrusion is not a problem if the person assigned to that task is always reliable. This perfect scenario is not the case in real life situation. To reduce human intervention when an intrusion is detected, we proposed Agent-Based IDS that has the ability to act autonomously when an intrusion is detected.