Why is Indra useful?

• IDS techniques:

  • Collaborative – scales well with size of network
  • Active – takes preventive action with low response time

• Security:

  • Uses strong cryptographic primitives for secure communication
  • Implemented in Java, code executes in sandbox

• Communication:

  • Variety of communication protocols (TCP/UDP, overlay multicast, Java RMI)
  • E-mail gateway enables admin to send patches to thousands of vulnerable machines instantly
  • Use existing work on overlay multicast mechanisms instead of reinventing the wheel