Distributed intrusion detection in clusters based on non-interference

Zimmermann, J. and Mohay, G.

We present this paper the investigation of a non-interference-based, policy-based intrusion detection system to detect security policy violations in clusters. The Reference Flow Control model has been proposed as a host-based approach for detecting security policy violations. We extend its design to deal with security policies applicable to cluster or grid applications. To achieve distributed intrusion detection, a host-based Reference Flow Control-based intrusion detection system is deployed on all nodes of a cluster. Messaging between the nodes is instrumented in order to enclose the actual message payloads with a small amount of meta-information used for communication between the local IDSes. Finally, we describe a proof-of-concept implementation on Linux/MPICH

Cite as: Zimmermann, J. and Mohay, G. (2006). Distributed intrusion detection in clusters based on non-interference. In Proc. Fourth Australasian Symposium on Grid Computing and e-Research (AusGrid 2006), Hobart, Australia. CRPIT, 54. Buyya, R. and Ma, T., Eds. ACS. 89-95.

(from crpit.com) (local if available)