A fusion of multiagent functionalities for effective intrusion detection system

Abstract

Provision of high security is one of the active research areas in the network applications.The failure in the centralized system based on the attacks provides less protection. Besides, the lack of update of newattacks arrival leads to the minimumaccuracy of detection. The major focus of this paper is to improve the detection performance through the adaptive update of attacking information to the database.We propose an Adaptive Rule-BasedMultiagent Intrusion Detection System (ARMA-IDS) to detect the anomalies in the real-time datasets such as KDD and SCADA. Besides, the feedback loop provides the necessary update of attacks in the database that leads to the improvement in the detection accuracy.Thecombination of the rules and responsibilities formultiagents effectively detects the anomaly behavior, misuse of response, or relay reports of gas/water pipeline data in KDD and SCADA, respectively. The comparative analysis of the proposed ARMA-IDS with the various existing path mining methods, namely, random forest, JRip, a combination of AdaBoost/JRip, and common path mining on the SCADA dataset conveys that the effectiveness of the proposed ARMA-IDS in the real-time fault monitoring. Moreover, the proposed ARMA-IDS offers the higher detection rate in the SCADA and KDD cup 1999 datasets.