UML-based analysis method for collaborative intrusion detection system

To enhance the capability of detecting distributed attacks, a general model of distributed collaborative intrusion detection was proposed, which is based on multi agent. It achieves detection of complex attacks through coordinating the lower-level agents using coordination agents. Unified modeling language (UML) was employed to analyze and design the main functions and static structure of the model, the inner reasoning behavior of agents and the cooperating behavior among agents. UML provides an effective means for the analysis and design of collaborative intrusion detection system, which facilitates its integration with other security systems.