Improved Performance High Speed Network Intrusion Detection Systems : High Speed NIDS Architecture using Dynamic Cluster and Intelligent Anomaly Detection and Filtration

Monis Akhlaq

ISBN 10: 3846525103 / ISBN 13: 9783846525104

Editore: LAP LAMBERT Academic Publishing, 2011

Riguardo questo articolo

nach der Bestellung gedruckt Neuware - Printed after ordering - This book has focussed on designing high performance Network Intrusion Detection Systems models, we have presented two designs to address limitations of Packet Loss and Low Detection Rate. The first high performance mechanism is based on Dynamic Cluster adoption using refined policy routing and Comparator Logic. The traffic load sharing mechanism reduces the packet drop by exchanging state information between load-balancer and cluster nodes and implementing switch overs between nodes in case the traffic exceeds pre-defined threshold. Comparator Logic enhances the overall efficiency by recovering lost data and analyzing it to identify threats. Intelligent Anomaly Detection Filtration (IADF) using cascaded architecture of anomaly-based filtration and signature-based detection process is the second high performance design. The IADF design is used to preserve resources of NIDS by eliminating large portion of the traffic on well defined logics. We have evaluated the mechanism to detect Denial of Service (DoS) and Probe attempts based by analyzing its performance on Defence Advanced Research Projects Agency (DARPA) dataset.

Codice articolo 9783846525104

Dati bibliografici

• Titolo: Improved Performance High Speed Network Intrusion Detection Systems : High Speed NIDS Architecture using Dynamic Cluster and Intelligent Anomaly Detection and Filtration
• Editore: LAP LAMBERT Academic Publishing
• Data di pubblicazione: 2011
• Lingua: Inglese
• ISBN 10: 3846525103
• ISBN 13: 9783846525104
• Rilegatura: Taschenbuch
• Condizione: Neu
• Dimensioni: 220 L x 150 A x 8 P (millimetri) 220 millimetri di larghezza per 150 millimetri di altezza per 8 millimetri di profondità
• Peso: 215 grammi

Descrizione articolo

Riassunto

This book has focussed on designing high performance Network Intrusion Detection Systems models, we have presented two designs to address limitations of Packet Loss and Low Detection Rate. The first high performance mechanism is based on Dynamic Cluster adoption using refined policy routing and Comparator Logic. The traffic load sharing mechanism reduces the packet drop by exchanging state information between load-balancer and cluster nodes and implementing switch overs between nodes in case the traffic exceeds pre-defined threshold. Comparator Logic enhances the overall efficiency by recovering lost data and analyzing it to identify threats. Intelligent Anomaly Detection Filtration (IADF) using cascaded architecture of anomaly-based filtration and signature-based detection process is the second high performance design. The IADF design is used to preserve resources of NIDS by eliminating large portion of the traffic on well defined logics. We have evaluated the mechanism to detect Denial of Service (DoS) and Probe attempts based by analyzing its performance on Defence Advanced Research Projects Agency (DARPA) dataset.

L'autore

Monis Akhlaq is doing Post Doctoral Research in CVC, University of Bradford. He Graduated in Telecomm. Engineering and later did Masters in Information Security from NUST, Pakistan. He also did Post Graduate Diploma in Satellite Communication from USA. Monis received his PhD in Network Security from University of Bradford, United Kingdom.