
396 The State of the Art in Intrusion Prevention and Detection
node. Its effect is too limited. This architecture is best suited in an environment where all the nodes
are capable of running an IDS [11].
Distributed and cooperative: Although each node runs its own IDS, nally they collaborate to
forma global IDS. This architecture is more suitable for at wireless sensor networks, in which a
global IDS is initiated due to the occurrence of inconclusive intrusions detected by an individual node.
Hierarchical: This architecture has been proposed for a multilayered wireless network. Here, the
network is divided into a cluster with cluster heads. A ...