Abstract:Dependence on the Internet is increasing dramatically. Therefore, many researchers have given great attention to the issue of how to tighten Internet security. This study proposes a new scheme for the distributed intrusion prevention system (DIPS), in which the concept of ‘union’ is presented for satisfying the increasing requirements of Internet security issues. In this proposed design, the network intrusion detection system (NIDS) applies a misuse detection technique to detect well‐known intrusion behavior on the Internet. Meanwhile, for anomaly detection technique, a tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to reveal previously undiscovered intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service (DDoS) attacks inside the protected allied network is also covered. To increase the detection accuracy, reduction of false positives and false negatives is also accomplished. Experimental results reveal that the suggested network security system scheme is effective and efficient in resolving the intrusion activity problem of real network environments. Copyright © 2011 John Wiley & Sons, Ltd. In this work, a new system scheme of the allied distributed intrusion prevention system was implemented to meet the increasing Internet security issues. A network intrusion detection system (NIDS) applies misuse detection technique to detect well‐known intrusion behaviors on the Internet. Meanwhile, for anomaly detection technique, a designed tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to find out new intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service attacks inside the protected allied network is also designed. To increase the detection accuracy, reducing false positive and false negative are also accomplished.

A Method for Denial of Service Intrusion Detection Based on Immune Danger Theory

Data-driven network layer security detection model and simulation for the Internet of Things based on an artificial immune system

Detecting Danger: Applying a Novel Immunological Concept to Intrusion Detection Systems

Danger Theory: The Link between AIS and IDS?

The Algorithm Design of Agent for Detecting and Analyzing Data in Intrusion Detection Based on Immune Principle

A virus detection model based on immunology and SVDD

Artificial Immune Detection for Network Intrusion Data Based on Quantitative Matching Method

Sensing Danger: Innate Immunology for Intrusion Detection

A novel immune detector training method for network anomaly detection

A hybrid artificial immune system and Self Organising Map for network intrusion detection

Adaptive Artificial Immune Networks for Mitigating DoS flooding Attacks

A Model For Fault Prevention Based on Artificial Immune Theory

A Method Based on AMHI for DDoS Attacks Detection and Defense

Danger ! Computer Security meets Operational Research Dr

Method Of Dynamic Script-Virus Detection Based On Immunology

An immunity-based intrusion detection solution for database systems

Malicious Code Execution Detection and Response Immune System inspired by the Danger Theory

Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions

An Immune Inspired Network Intrusion Detection System Utilising Correlation Context

Dendritic Cells for Anomaly Detection.

Exploring the Potential of the Innate Immune System for Computers Network Security