Preventing unauthorised access to corporate information systems is essential for many organisations. To address this problem we built a security enhancement software system using software agents, in which a core software agent resides on a server and user end software agents reside at each user workstation. By downloading a pattern of typical user behaviour and rules governing invalid behaviour from a core agent to each user end agent, all decisions and actions about atypical or invalid user behaviour can be taken by a user agent. This permits security detection to continue even when the core agent fails to operate.
['John Pikoulas', 'Mike Mannion', 'William J Buchanan']
Software agents and computer network security