Abstract:Dependence on the Internet is increasing dramatically. Therefore, many researchers have given great attention to the issue of how to tighten Internet security. This study proposes a new scheme for the distributed intrusion prevention system (DIPS), in which the concept of ‘union’ is presented for satisfying the increasing requirements of Internet security issues. In this proposed design, the network intrusion detection system (NIDS) applies a misuse detection technique to detect well‐known intrusion behavior on the Internet. Meanwhile, for anomaly detection technique, a tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to reveal previously undiscovered intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service (DDoS) attacks inside the protected allied network is also covered. To increase the detection accuracy, reduction of false positives and false negatives is also accomplished. Experimental results reveal that the suggested network security system scheme is effective and efficient in resolving the intrusion activity problem of real network environments. Copyright © 2011 John Wiley & Sons, Ltd. In this work, a new system scheme of the allied distributed intrusion prevention system was implemented to meet the increasing Internet security issues. A network intrusion detection system (NIDS) applies misuse detection technique to detect well‐known intrusion behaviors on the Internet. Meanwhile, for anomaly detection technique, a designed tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to find out new intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service attacks inside the protected allied network is also designed. To increase the detection accuracy, reducing false positive and false negative are also accomplished.

Distributed group membership algorithm in intrusion-tolerant system

Group membership service for intrusion tolerance

Research on Improved Intrusion Detection System in Mobile Ad hoc Network

Cooperation System of Worm Detection and Quarantine in Real Time

A Distributed and Autonomous Guard System Based on Cloud Environments

A Distributed IP Spoof Detection System in Intranet

Self-adaptive Failure Detector for Peer-to-Peer Distributed System Considering the Link Faults

Group Testing Based Detection of Web Service DDoS Attackers.

ByzID: Byzantine Fault Tolerance from Intrusion Detection

A Distributed Intrusion Detection System Using Cooperating Agents

Design on Combination System of Distributed Firewall and Invading Detection

AN INTRUSION-TOLERANT BASED SCHEME FOR SURVIVABLE SYSTEM DESIGN

Dynamic reconfiguration fault-tolerance algorithm in a distributed parallel server

A DoS and fault-tolerant authentication protocol for group communications in ad hoc networks

An Intrusion-Tolerant Model Based on Dynamic Threshold Mechanism

Self-organized Hierarchical Massive Network Intrusion Detection System

Distributed Intrusion Detection for Mobile Ad Hoc Networks

Specification-based Distributed Detection for Mobile Ad Hoc Networks

An Implementation of Failure Detection for Large-scale Distributed Systems

Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions

A Topology Control Algorithm Based on D-region Fault Tolerance