It monitors the behavior of a system and sends an alert when a deviation from normal behavior occurs. This behavior-based approach is used for processes running on UNIX machines. It has broken new ground by applying the Teiresias algorithm, originally used for DNA sequencing, to intrusion detection. The GSAL is contributing to this joint project by providing expertise on the ID front. The principle of RID is to monitor a network for significant deviations from its normal behavior.
Intrusion detection is crucial for providing active security in a network.
As a byproduct, it also provides a means of automatically detecting potential system misconfigurations or errors that may affect overall network operation. A RID application prototype to detect reachability attacks in OSPF and PNNI has been implemented and is operational.