Abstract:Dependence on the Internet is increasing dramatically. Therefore, many researchers have given great attention to the issue of how to tighten Internet security. This study proposes a new scheme for the distributed intrusion prevention system (DIPS), in which the concept of ‘union’ is presented for satisfying the increasing requirements of Internet security issues. In this proposed design, the network intrusion detection system (NIDS) applies a misuse detection technique to detect well‐known intrusion behavior on the Internet. Meanwhile, for anomaly detection technique, a tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to reveal previously undiscovered intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service (DDoS) attacks inside the protected allied network is also covered. To increase the detection accuracy, reduction of false positives and false negatives is also accomplished. Experimental results reveal that the suggested network security system scheme is effective and efficient in resolving the intrusion activity problem of real network environments. Copyright © 2011 John Wiley & Sons, Ltd. In this work, a new system scheme of the allied distributed intrusion prevention system was implemented to meet the increasing Internet security issues. A network intrusion detection system (NIDS) applies misuse detection technique to detect well‐known intrusion behaviors on the Internet. Meanwhile, for anomaly detection technique, a designed tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to find out new intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service attacks inside the protected allied network is also designed. To increase the detection accuracy, reducing false positive and false negative are also accomplished.

A logical replication-based intrusion detection approach for CSCW system

OWL: Understanding and Detecting Concurrency Attacks

Cooperation System of Worm Detection and Quarantine in Real Time

Multi-agent based hybrid Intrusion detection system

Dynamical System Theory for the Detection of Anomalous Behavior in Computer Programs

Node Replication Attack Detection in Distributed Wireless Sensor Networks

Cooperative Work Systems for the Security of Digital Computing Infrastructure

A Practical Database Intrusion Detection System Framework

A cooperative intrusion detection system based on autonomous agents

Improving IIoT security: Unveiling threats through advanced side-channel analysis

A Distributed Intrusion Detection System Using Cooperating Agents

Research on Application of Mimic Defense in Industrial Control System Security

A Novel Framework for Zero-Day Attacks Detection and Response with Cyberspace Mimic Defense Architecture

An immunity-based intrusion detection solution for database systems

Interpretable Cyber Threat Detection for Enterprise Industrial Networks: A Computational Design Science Approach

Detecting PLC Intrusions Using Control Invariants

An integrated pattern recognition approach for intrusion detection

A Range-assisted Detection Protocol Against Replication Attacks in WSNs

Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions

Intrusion Detection in Distributed Systems: An Abstraction-Based Approach

A Framework for Mimic Defense System in Cyberspace