Attack Detection using Cooperating Autonomous Detection Systems (CATS)

Today’s communication networks are threatened by an increasing number intrusion attempts, worms, and denial of service (DoS) attacks. Apart from general measures for attack prevention, the possibility to detect ongoing attacks in order to take appropriate countermeasures constitutes an important asset for network security. We present a novel approach for attack detection based on cooperating autonomous detection systems (CATS). While a single detection system is able to identify ongoing attacks autonomously, cooperation with remote detection systems located in other parts of the network can improve the detection performance.