Abstract:Dependence on the Internet is increasing dramatically. Therefore, many researchers have given great attention to the issue of how to tighten Internet security. This study proposes a new scheme for the distributed intrusion prevention system (DIPS), in which the concept of ‘union’ is presented for satisfying the increasing requirements of Internet security issues. In this proposed design, the network intrusion detection system (NIDS) applies a misuse detection technique to detect well‐known intrusion behavior on the Internet. Meanwhile, for anomaly detection technique, a tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to reveal previously undiscovered intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service (DDoS) attacks inside the protected allied network is also covered. To increase the detection accuracy, reduction of false positives and false negatives is also accomplished. Experimental results reveal that the suggested network security system scheme is effective and efficient in resolving the intrusion activity problem of real network environments. Copyright © 2011 John Wiley & Sons, Ltd. In this work, a new system scheme of the allied distributed intrusion prevention system was implemented to meet the increasing Internet security issues. A network intrusion detection system (NIDS) applies misuse detection technique to detect well‐known intrusion behaviors on the Internet. Meanwhile, for anomaly detection technique, a designed tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to find out new intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service attacks inside the protected allied network is also designed. To increase the detection accuracy, reducing false positive and false negative are also accomplished.

Research and Implementation of Network Security Cooperative Defense System

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Evolving Defense Mechanism for Future Network Security

Network Safeguard System Based on IDXP

Intrinsic Security and Self-Adaptive Cooperative Protection Enabling Cloud Native Network Slicing

Cooperation System of Worm Detection and Quarantine in Real Time

Proactive Security Defense of Dynamic Network

Hybrid Intrusion Detection System for Complicated Network

Research into Agent-oriented Worm Defense System

Network Attack-Defense Simulation Training System Based on HLA

Research on Network Security Collaborative Early-Warning Based on Multi-agent

A cooperative intrusion detection system based on autonomous agents

Design and implementation of computer network security detection and control system

A Collaborative Network Security Management System in Metropolitan Area Network

Design for Dual Network Defense System

A Method of DDoS Attack Detection and Mitigation for the Comprehensive Coordinated Protection of SDN Controllers

Dual-structural network of active defense

An autonomous system based security mechanism for network coding applications in content-centric networking

Policy Based Network Security System

Design and Implementation of A Network Security Management System

Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions