Using Swarming Agents for Scalable Security in Large Network Environments
The difficulty of securing computer infrastructures increases as they grow in size and complexity. Network-based security solutions such as IDS and firewalls cannot scale because of exponentially increasing computational costs inherent in detecting the rapidly growing number of threat signatures. Hostbased solutions like virus scanners and IDS suffer similar issues, and these are compounded when enterprises try to monitor these in a centralized manner. Swarm-based autonomous agent systems like digital ants and artificial immune systems can provide a scalable security solution for large network environments. The digital ants approach offers a biologically inspired design where each ant in the virtual colony can detect atoms of evidence that may help identify a possible threat. By assembling the atomic evidences from different ant types the colony may detect the threat. This decentralized approach can require, on average, fewer computational resources than traditional centralized solutions; however there are limits to its scalability. This paper describes how dividing a large infrastructure into smaller managed enclaves allows the digital ant framework to effectively operate in larger environments. Experimental results will show that using smaller enclaves allows for more consistent distribution of agents and results in faster response times.
- Research Organization:
- Pacific Northwest National Lab. (PNNL), Richland, WA (United States)
- Sponsoring Organization:
- USDOE
- DOE Contract Number:
- AC05-76RL01830
- OSTI ID:
- 1345474
- Report Number(s):
- PNNL-SA-79771; 400470000
- Resource Relation:
- Conference: IEEE 54th International Midwest Symposium on Circuits and Systems (MWSCAS 2011), August 7-10, 2011, Seoul, Korea
- Country of Publication:
- United States
- Language:
- English
Similar Records
DualTrust: A Distributed Trust Model for Swarm-Based Autonomic Computing Systems
Distributed Logical Analytic Domains (DLADs) for Distributed HPC Security