Design and Verification of Secure Communication Protocol for Network Intrusion Detection System

宋勇,秦拯

DOI: https://doi.org/10.3969/j.issn.1006-2475.2010.07.015

2010-01-01

Abstract:Considering Some problems that Secure communications between the various modules in distributed intrusion detection system,a kind of network security protocols of applicable to distributed intrusion detection system is proposed,and proved that the security in theory.

What problem does this paper attempt to address?

Research of a Secure Communication Protocol for Agent-based Distribution Intrusion Detection System

Hecheng Li

2012-01-01

Abstract:Considering some problems that secure communications between the various modules in distributed intrusion detection system, a kind of network security protocol of applicable to distributed intrusion detection system is proposed. Combining with theory and practice, it was also proved that this protocol is efficient.
Intrusion Detection And Simulation For High-Speed Networks

Fei Yu,XiaoPing Dai,Yue Shen,Huang Huang,Miaoliang Zhu

DOI: https://doi.org/10.1109/ICSSSM.2005.1500110

2005-01-01

Abstract:The problem in network security presently is how to get real-time intrusion detection and alert. In the paper, we design Intrusion Detection System architecture and arithmetic again, meanwhile put forward an improved pattern matching arithmetic based on protocol analysis and theorization machine on Frete. New architecture can use network processor to collect and analyze data in network bottom, which enhance the speed and efficiency in Detection System.
Design of Communication Protocols of Remote Monitoring System Based on Multi-Tiered Structure

HU Li-xia,ZHAO Guang-zhou

DOI: https://doi.org/10.3969/j.issn.1001-4551.2007.01.010

2007-01-01

Abstract:A new kind of communication protocols based on multitiered structure,which was applied in a remote environment monitoring system,was brought out.In the new thought,communication protocols have been divided into 3 layers: application data layer,network communication layer and network interface layer,and the design methods of every layer were given out.Communication protocols based on multi-tiered structure is independent,agile,easy to realize and maintain,and propitious to standardize.
A Design of Secure Community Healthcare Monitoring System Based on Wireless Sensor Networks

潘巨龙,李善平,吴震东,张道远

DOI: https://doi.org/10.3969/j.issn.1004-1699.2009.06.016

2009-01-01

Abstract:A design of secure community healthcare monitoring system based on wireless sensor networks is presented.To address the issues of system security and be resilient to diverse attacks,the system protects sensitive data from being attacked by using Elliptic Curve Cryptography and digital signature scheme in those resource-constrained sensor nodes.A secure architecture of community healthcare monitoring system is proposed.Experiment result shows that the system can resist some outer attacks(such as eavesdropping) and inner attacks.
Research on Improved Intrusion Detection System in Mobile Ad hoc Network

Yong-mei GAO,Ji-yi WU,Ling-di PING

DOI: https://doi.org/10.3969/j.issn.1673-629X.2009.08.039

2009-01-01

Abstract:Owing to many new characteristics such as central-less control and multi-hop communication,the security situation is more rigorous than that in the traditional Ad hoc network.Especially,when the number of nodes increase,the difficulty of building network,network availability and network security will be influenced badly.After the particular analysis of Sergio Marti's Watchdog and Pathrater arithmetic,intrusion detection system called SuperWatchdog,as the improved solution,was introduced to overcome the weakness of Watchdog.The main feature of the proposed system is its ability to discover malicious nodes which can partition the network by falsely reporting other nodes as misbehaving and then proceeds to protect the network.Simulation results show that our system decrease the overhead greatly,though it does not increase the throughput obviously.
Design and Implementation of Network Worm Detection System for Internal Network

WANG Wei,LU Dongming,DONG Yabo,CHEN Yufeng

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.17.072

2006-01-01

Abstract:With the rapid development of computer technology,Internet applications are used more and more widely,computer networks are exposed to various threats,especially network worms.This paper introduces the definition and principle of network worms,and based on the mechanism of network worms,it proposes and implements a network worm detection system for Internal network,which is proved to be able to detect the network worm accurately.
Formal Verification Techniques for Security Protocols

Yu Dong

2003-01-01

Abstract:Rapid development of networks and communications make security a more crucial problem. To provide security for different systems many communication security protocols are proposed.In this paper,illustrate the formal verific ation requirement for security protocols, also describe several formal verification techniques and set forth the relative merit of each in detail.And the challenges with which formal verification techniques faced are discussed .The researches on these aspects and directions of development are presented.
Research on distributed intrusion detection system based on Protocol analysis

Xiaohong Qu,Zhijie Liu,Xiaoyao Xie

DOI: https://doi.org/10.1109/ICASID.2009.5276963

2009-01-01

Abstract:Intrusion detection system is a new safeguard technology for system security after traditional technologies, such as firewall, message encryption and so on. To intrusion detection system, it makes improving efficiency of intrusion detection by choosing better method of intrusion detection, traditional intrusion detection system because of large amount of calculation, the high rate of omissions and misstatem tmts has not already adapted to the needs of the current network system protocol analysis is a kind of key technology for network intrusion detection. The paper which based on that idea will presents a distributed intrusion detection system model based on protocol analysis, it makes processing work very simple using protocol analysis technology in detection module. Compared with other model, the model has obvious advantage by analysing, and it can decrease the rate of FN and enhance the capability of system.
Design And Implementation Of A Dids

Hongmin Cai,Naiqi Wu

DOI: https://doi.org/10.1109/WCINS.2010.5541796

2010-01-01

Abstract:With the fast development of computer network, the problem of network security becomes more and more serious. The single firewall can not solve the problem entirely and an intrusion detection system is helpful. This paper presents the design and development of a distributed intrusion detection system to protect the network security. Experiments shows that it works well.
The research of distributed intrusion detection and communication protocol based on entity

Tong Xiaojun,Cui Minggen,Ma Chao

DOI: https://doi.org/10.1109/WiCom.2008.1104

2008-01-01

Abstract:The existed distributed intrusion detection system adopt the architecture which the data is collected and analyzed centrally, in which there are some defects. The defects are like simple point invalidation and bad extension. On the base of analyzing existed distributed intrusion detection system , this paper designs one distributed intrusion detection system based on the entity model and proposed a secure communication protocol. In order to guarantee security, reliability and integrity among entities in the model, this paper has designed an object-oriented exchange model of information. The paper also has designed a safe transport protocol based on ECC, DES symmetrical and the asymmetrical encryption technology, so it can assure to communicates safely and effectively with each kind of entity. © 2008 IEEE.
Design of an Intrusion Detection Model for Detecting Distributed Attacks

郭丹,阚忠良

DOI: https://doi.org/10.3969/j.issn.1009-2552.2004.03.006

2004-01-01

Abstract:This paper presents the design of an intrusion detection model adopting a signature-based approach for detecting distributed attacks, which aims at detecting distributed attacks that cannot be detected by data collection mode at any single place. Comparing with other approaches, the communication imposed by intrusion detection is greatly reduced and the management of transmission security in this model is simplified.
Design and Simulation of Intrusion Detection Based on DSR Protocol

刘叶卿,易平,蒋兴浩,李建华

DOI: https://doi.org/10.3969/j.issn.1006-9348.2008.11.040

2008-01-01

Abstract:Security of Mobile Ad hoc network is much more important due to its public transmission media,dynamic topology,cooperative route algorithm,lack of monitoring and managing and etc.Now three kinds of Intrusion nodes are defined: to minimize the spense of energe,Selfish node would skip the responsibility of a router;Black hole nodes which are eager to play the router role in order to discard the useful data packet;Faulty node does not forward or pop up packets due to software or hardware fault.The aim is to simulate the malicious nodes' behavior on NS2,and then add the function of monitoring to the DSR routing protocol,compare the results with and without the monitor system.The result shows that the monitor system turns down the packet loss ratio and gets the increase of average route hop under control.
Problems of Network-based Intrusion Detection System and Their Countermeasures

张铭来,金成飚,赵文耘

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.01.066

2002-01-01

Abstract:Intrusion Detection is an important technology in network security domain . This paper discusses some problems of network-based intrusion detection system in three ways: the data link layer, the network layer and the transport layer , and analyzes the attack on the network-based IDS and its countermeasure.
Intrusion Detection System Based on Protocol Analysis

Zhi Xue

2007-01-01

Abstract:Intrusion detection based on protocol has become one of the key technologies for the intrusion system detection of the next generation.The paper￡¨based on the analysis of network intrusion detection's structure and traditional character pattern matching technology,explains the theory and realization of protocol analysis,based on protocol analysis,proposes a model of intrusion detection system,and finally analyses a typical case of intrusion detection.
Research and Implement of Distributed Intrusion Detection System

蔡洪民,伍乃骐,陈素,陈沁群

DOI: https://doi.org/10.16208/j.issn1000-7024.2009.06.053

2009-01-01

Abstract:With the great development of computer network,the network security problem becomes more serious,the single IDS can not meet the needs of network security,so the DIDS comes forth.A distributed intrusion detection system is brought forward,the inverted connection technology of the rebound Trojan horse is applied to the communication between agents and server,the agents adopt multi-thread technology to capture the packets,and it can detect the Trojan horse by the incorporation of the system process and the port communication.The server can deploy the uniform tactics to the agents and it can monitor the agents in real time,and so the DIDS en-hances the network security.
Design and Implement of Distributed Intrusion Detection Systembased on Agent

DING Guo-liang,WANG Xi-wu,CHEN Kai-yan,WANG Jia-zhen

DOI: https://doi.org/10.3969/j.issn.1001-9383.2006.01.004

2006-01-01

Abstract:The problems of existing Intrusion detection system(IDS)is analyzed,a kind of distributed architecture of uniting the level and equal structures,is put forward,and the realizations of detection agent and communication protocol are given.The experiments proves this the system may carry out intrusion detection under distributed net- work environment.
Research and Design of Intrusion Detection Systems Based on SNMP

Xiao He

2010-01-01

Abstract:This paper analyzes the current methods commonly used in intrusion detection and network intrusion attacks,based on an SNMP-based Intrusion Detection System protocol design.Through reading and analyzing Management Information Base(MIB) of the network connection information,aiming at the characteristics of network intrusion and attacks,The program monitoring the network.The system consists of six modules,to realize network intrusion detection.
Design and Implementation of a Distributed Cooperative Intrusion Detection System

段海新,吴建平

DOI: https://doi.org/10.13328/j.cnki.jos.2001.09.015

2001-01-01

Ruan Jian Xue Bao/Journal of Software

Abstract:An integrative taxonomy for intrusion detection technologies is proposed, which can specify accurately existing intrusion detection methods. Aiming at multiple-domain environments, a distributed cooperative intrusion detection system (DCIDS) is designed, which implements cooperative intrusion detection through efficient, secure information exchange among IDSes in different domain. The architecture of intrusion detection systems is described, as well as its four components: sensor, analyzer, manager and user-interface. Some key issues are also discussed, including secure communication and selection of detection places.
A Practical Communication Mechanism for Heterogeneous Sensors in Distributed IDS

郑庆华,刘君杰,范林涛

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.16.045

2004-01-01

Abstract:A new kind of communication mechanism for distributed IDS is proposed. The paper gives the architecture and organization of the communication mechanism, proposes a universal descriptive method based on XML and IDMEF for different kinds of intrusion events so that it can solve the exchange problem in heterogeneous and distributed IDSs,a secure communication strategy based on SSL for the message exchange between sensor and console is also presented. The performance of the proposed communication mechanism is analyzed quantitatively.
DESIGNING AND IMPLEMENTING DISTRIBUTED TROJAN DETECTION SYSTEM

Cai Hongmin,Wu Naiqi,Teng Shaohua

DOI: https://doi.org/10.3969/j.issn.1000-386X.2012.05.076

2012-01-01

Abstract:Networks attack means emerge endlessly along with the growing serious network security problems.As a kind of main malicious code,Trojan horse program brings great troubles to computer users in the areas of infringing personal privacies and remotely monitoring the computers of others,etc.The authors implement a distributed Trojan horse program detection system by applying the deep packet inspection technology to the detection of Trojan horse program,we use regular expression to match the attack mode in detecting the Trojan horse program,therefore have strengthened the security of networks.

Design and Verification of Secure Communication Protocol for Network Intrusion Detection System

Research of a Secure Communication Protocol for Agent-based Distribution Intrusion Detection System

Intrusion Detection And Simulation For High-Speed Networks

Design of Communication Protocols of Remote Monitoring System Based on Multi-Tiered Structure

A Design of Secure Community Healthcare Monitoring System Based on Wireless Sensor Networks

Research on Improved Intrusion Detection System in Mobile Ad hoc Network

Design and Implementation of Network Worm Detection System for Internal Network

Formal Verification Techniques for Security Protocols

Research on distributed intrusion detection system based on Protocol analysis

Design And Implementation Of A Dids

The research of distributed intrusion detection and communication protocol based on entity

Design of an Intrusion Detection Model for Detecting Distributed Attacks

Design and Simulation of Intrusion Detection Based on DSR Protocol

Problems of Network-based Intrusion Detection System and Their Countermeasures

Intrusion Detection System Based on Protocol Analysis

Research and Implement of Distributed Intrusion Detection System

Design and Implement of Distributed Intrusion Detection Systembased on Agent

Research and Design of Intrusion Detection Systems Based on SNMP

Design and Implementation of a Distributed Cooperative Intrusion Detection System

A Practical Communication Mechanism for Heterogeneous Sensors in Distributed IDS

DESIGNING AND IMPLEMENTING DISTRIBUTED TROJAN DETECTION SYSTEM