Abstract:Dependence on the Internet is increasing dramatically. Therefore, many researchers have given great attention to the issue of how to tighten Internet security. This study proposes a new scheme for the distributed intrusion prevention system (DIPS), in which the concept of ‘union’ is presented for satisfying the increasing requirements of Internet security issues. In this proposed design, the network intrusion detection system (NIDS) applies a misuse detection technique to detect well‐known intrusion behavior on the Internet. Meanwhile, for anomaly detection technique, a tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to reveal previously undiscovered intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service (DDoS) attacks inside the protected allied network is also covered. To increase the detection accuracy, reduction of false positives and false negatives is also accomplished. Experimental results reveal that the suggested network security system scheme is effective and efficient in resolving the intrusion activity problem of real network environments. Copyright © 2011 John Wiley & Sons, Ltd. In this work, a new system scheme of the allied distributed intrusion prevention system was implemented to meet the increasing Internet security issues. A network intrusion detection system (NIDS) applies misuse detection technique to detect well‐known intrusion behaviors on the Internet. Meanwhile, for anomaly detection technique, a designed tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to find out new intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service attacks inside the protected allied network is also designed. To increase the detection accuracy, reducing false positive and false negative are also accomplished.

Efficacy of Attack detection capability of IDPS based on it's deployment in wired and wireless environment

Research of Distributed Pre-Decision Engine in Wireless Intrusion Prevention Systems

Asidps: Auto-Scaling Intrusion Detection And Prevention System For Cloud

An Efficient Hybrid IDS Deployment Architecture for Multi-Hop Clustered Wireless Sensor Networks

Hybrid Intrusion Detection System for Complicated Network

An overview of Intrusion Detection and Prevention Systems

IDPS: An Integrated Intrusion Handling Model for Cloud

Implementation of intrusion prevention system (IPS) to analysis triad cia on network security attacks on web server

Evaluation of Network Based IDS and Deployment of multi-sensor IDS

Closing Disparities in Intrusion Detection: An In-Depth Analysis of IDPS Systems

Safeguarding Smart Horizons: Crafting the Future of IOT Security Through Intrusion Detection and Prevention

Network Intrusion Detection and Prevention

Intrusion Prevention System for Website Attacks

Enhancing Cybersecurity in Cloud Computing and WSNs: A Hybrid IDS Approach

Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions

Ensemble Defense System: A Hybrid IDS Approach for Effective Cyber Threat Detection

DMAIDPS: a distributed multi-agent intrusion detection and prevention system for cloud IoT environments

Difference between Intrusion Detection System (IDS) and Intrusion Prevention System (IPS)

Implementing Snort Intrusion Prevention System (IPS) for Network Forensic Analysis

Response option for attacks detected by intrusion detection system

Research on Distributed Intrusion Prevention System on High-Speed Networks