Abstract:Dependence on the Internet is increasing dramatically. Therefore, many researchers have given great attention to the issue of how to tighten Internet security. This study proposes a new scheme for the distributed intrusion prevention system (DIPS), in which the concept of ‘union’ is presented for satisfying the increasing requirements of Internet security issues. In this proposed design, the network intrusion detection system (NIDS) applies a misuse detection technique to detect well‐known intrusion behavior on the Internet. Meanwhile, for anomaly detection technique, a tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to reveal previously undiscovered intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service (DDoS) attacks inside the protected allied network is also covered. To increase the detection accuracy, reduction of false positives and false negatives is also accomplished. Experimental results reveal that the suggested network security system scheme is effective and efficient in resolving the intrusion activity problem of real network environments. Copyright © 2011 John Wiley & Sons, Ltd. In this work, a new system scheme of the allied distributed intrusion prevention system was implemented to meet the increasing Internet security issues. A network intrusion detection system (NIDS) applies misuse detection technique to detect well‐known intrusion behaviors on the Internet. Meanwhile, for anomaly detection technique, a designed tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to find out new intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service attacks inside the protected allied network is also designed. To increase the detection accuracy, reducing false positive and false negative are also accomplished.

Research on Distributed Intrusion Prevention System on High-Speed Networks

Research of Distributed Pre-Decision Engine in Wireless Intrusion Prevention Systems

Intrusion Detection And Simulation For High-Speed Networks

On a Distributed Intrusion Detection Model Based on the Super-Peer Framework

Hybrid Intrusion Detection System for Complicated Network

New Trend of Intrusion Detection System for High-speed Networks

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Design and Implementation of a Gigabit Rate Network Intrusion Prevention System

Research on Improved Intrusion Detection System in Mobile Ad hoc Network

Traffic Distributor for High-Speed Network Intrusion Detection System

A Parallel Intrusion Detection System for High-Speed Networks

Study on adaptive trust alert correlation P2P overlay IDS

Embedded network processor based parallel intrusion detection

Research and Implementation of High-Speed Packet Processing in Gigabit Network IPS

Design of Traffic Distributor Based on IXP1200 for Network Intrusion Detection System

Towards High-Performance Network Intrusion Prevention System on Multi-core Network Services Processor

Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions

A DoS Resilient Flow-level Intrusion Detection Approach for High-speed Networks

Intrusion prevention with attack traceback and software-defined control plane for campus networks

Real-time intrusion detection for high-speed networks

A Distributed IP Spoof Detection System in Intranet