Hi everyone,
Hope u all in good shape. I'm doing a simple project integrating mobile agents using aglets with intrusion detection system using snort., all these are done with linux fedora core 5 platform.
The basic idea is, when snort detect an intrusion, an aglet will read the log file created by snort containing the alert message of the intrusion, then the aglet will inform tahiti server about this, tahiti server will then dispatch a new agent to the targeted PC and close the port of the targeted PC in order to prevent the intrusion from occuring.
My question is, could this be done successfully. :?: :eek: If there's other idea about doing this please feel free to let me know, i would really appreciate it. Thanks guys.