Model

Mobile

Nids, hids or hybrid

Behavior layer

Detection technique

Mobile agent

Technology

Strength

Banik, s.m.; pena, l-2015

Nids

Tcp

Connection

Based

Scanning Algo.

Deploying Agents.

Heavy Scan algorithm (hsa), medium scan algorithm (msa),

And light scan algorithm (lsa)

Detect the

Distributed

Attack

Abdurrazaq m.n., bambang r.t., rahardjo b.-2014

Hybrid

(foraging

Behavior)

Agent based on ant colony clustering

Jade (java agent development

Environment) cooperative agent

Clustering

Recognize a new

And coordinated attack,

Biswas, a.; sharma, m.; poddder, t.; kar, n.-2014

Hybrid

Multi-agent based detection

Coordination agent

Monitoring agent

Multilayer technique

Less time is to be taken to detect Intrusion.

Ionita, i.; ionita, l.-2013

Hids,nids

Tcp

Connection

Based

Multi

Agent based with data mining

Classification agent

Intelligent agents and data mining framework g

Hybrid intrusion detection system improving the

immunity of computer systems/networks.

Gutierrez, s.a.; branch, j.w-2013

Hids

Multi-Agent based ids

Jade (java agent development

Environment) cooperative agent

triggering agents

Jade platform was used to establish the multi-agent

Platform.

Very desirable Having more robust analysis mechanisms to provide

Pro-activeness in attack detection, and even prediction from the analysis of collected data related to previous attacks.

Djemaa, b.; okba, k-2012

Hybrid

Tcp

Connection

Based

Hama-ids

Mobile agent (aglets)

Generator agent

Collector agent

Analyzer agent

Redirector agent

Hybrid approach based on

The mobile agents

Hybrid intrusion detection system improving the anomaly detection rate

Zhang ran-2012

Hybrid

Collaborative

Detection; coordination domain

basic agents Coordination agent

interface agents

Collaborative intrusion

Detection model based on multi-agent

Provides dynamic adaptability to the changing environment and attacks.

Huailin;

Tianmao; qingfeng; yangbin-2011

Not

Specified

Multi-agent technology

Management agent

Adids (adaptive distributed

Ids model based on multi-agent.)

It has better adaptive capacity and better response and treatment on the network environment and changeful attack methods