Volume 9 Issue 2

Deploying An Intrusion Detection System: Commonwealth Laws and a Queensland Model

IAN WILSON*, ALAN B. TICKLE**, KATHERINE GRIGG*** AND GEORGE MOHAY****

Intrusion detection systems are increasingly being deployed for the real-time monitoring and surveillance of activity on communications networks. These form part of a broader set of mechanisms and procedures designed to protect an organisation’s information technology infrastructure against unauthorised access and misuse. Inherently, such systems have the potential to reveal and record significant quantities of information. Importantly, some of this information may be of a personal, private or confidential nature. Hence the question arises as to whether or not the activities of monitoring, collecting or recording information using an intrusion detection system – activities undertaken with seemingly noble intentions such as detecting criminal or other suspected illegal activity – do themselves directly or indirectly violate the law in Australia. A review of the relevant legislation in Australia shows that the answer, whilst encouraging, is far from certain.

Keywords: communications network security, intrusion detection systems, telecommunications interception, privacy, listening devices.

Box 2434 GPO Brisbane

Queensland 4001, Australia

** ab.tickle@qut.edu.au Machine Learning Research Centre

*** Faculty of Law

**** g.mohay@qut.edu.au School of Computing Science