A Profiling Model on the top of Agent Collaborative Environment to Monitor Suspicious Activities

Abstract

The profiles of all insiders in the organization are built and maintained in the proposed model to identify threat. Software agents are autonomously working to record all activities of the authenticated users. When profile is matured, it is compared with the policy of the organization and insider’s profile is marked as acceptable or suspicious accordingly. The model is generic, adaptable and can be deployed most of the organizations without changing its code. Manager agents and the Profiling agents have been designed for implementation of the model. Profiling agents trace all activities and behavior of the authenticated employees and send to the Manager agent for necessary processing for its analysis. The decision is taken at the Manager Agent end to avoid any threat.