Summary and Current Status

• Contributions:

  • Collaborative and active IDS with support for peer-to-peer communication
  • Secure communication by the use of strong cryptography
  • Java implementation allows fine-grained access control
  • On-the-fly loadable plugins allows rapid fixing of vulnerabilities
  • E-mail gateway allows admin to mail plugins instantly to multiple machines

• Status:

  • Current prototype version has “toy” watchers, port scanning etc.
  • Needs interfacing with existing intrusion detection software, e.g. Tripwire
  • Need to improve efficiency
  • Currently only centralized key server supported