Preventing unauthorised access to corporate information systems is essential for many organisations.
To address this problem we built a security enhancement software system using software agents, in
which a core software agent resides on a server and user end software agents reside at each use)
workstation. By downloading a pattern of typical user behaviour and rules governing invalid behaviotufrom
a core agent to each user end agent, all decisions and actions about atypical or invalid user
behaviour can be taken by a user agent. This permits security detection to continue even when the
core agent fails to operate