The Vernes architecture: Dependable Wide-Area Intrusion Detection Systems

This paper presents a novel architecture that supports the reliability and dependability of an Intrusion Detection System (IDS). It also provides timeliness guarantees that are shown to be fundamental in a trusted IDS. The architecture is also distributed, in the sense that the several components communicate and exchange status between them in a secure way. It uses the wormhole principle as a means to assess the timeliness while working in a fully asynchronous environment, like an Intranet or the Internet.