I need to design an IDS using Mobile agent. Can anyone suggest how packet capture software is efficient in JADE, how to match the captured packet for intrusion?
Tell me more
×
IT Security Stack Exchange is a question and answer site for
IT security professionals. It's 100% free, no registration required.
|
|
|
I am not familiar with JADE, but at a first glance it doesn't look like it supports packet capture. For that you will need a native binding to a packet capture library. In java, this would be JPCap. Once you have the packet sniffing working, you need to come up with a set of rules. The preferred method is to create a whitelist; write rules that describe normal traffic, with as little room for change as possible, and then log anything else. |
|||
|
|
