Abstract:Dependence on the Internet is increasing dramatically. Therefore, many researchers have given great attention to the issue of how to tighten Internet security. This study proposes a new scheme for the distributed intrusion prevention system (DIPS), in which the concept of ‘union’ is presented for satisfying the increasing requirements of Internet security issues. In this proposed design, the network intrusion detection system (NIDS) applies a misuse detection technique to detect well‐known intrusion behavior on the Internet. Meanwhile, for anomaly detection technique, a tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to reveal previously undiscovered intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service (DDoS) attacks inside the protected allied network is also covered. To increase the detection accuracy, reduction of false positives and false negatives is also accomplished. Experimental results reveal that the suggested network security system scheme is effective and efficient in resolving the intrusion activity problem of real network environments. Copyright © 2011 John Wiley & Sons, Ltd. In this work, a new system scheme of the allied distributed intrusion prevention system was implemented to meet the increasing Internet security issues. A network intrusion detection system (NIDS) applies misuse detection technique to detect well‐known intrusion behaviors on the Internet. Meanwhile, for anomaly detection technique, a designed tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to find out new intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service attacks inside the protected allied network is also designed. To increase the detection accuracy, reducing false positive and false negative are also accomplished.

A Distributed IP Spoof Detection System in Intranet

Network Safeguard System Based on IDXP

Intrusion Detection And Simulation For High-Speed Networks

Detecting SYN Flooding Agents under Any Type of IP Spoofing

DESIGNING AND IMPLEMENTING ARP SPOOFING DETECTING SYSTEM BASED ON SNMP PROTOCOL

ARP Spoofing Detection and Guarding Algorithm

Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions

Research of the ARP Spoofing Principle and a Defensive Algorithm

Intranet security strategy based on a monitor system

Intranet Security using a LAN Packet Sniffer to Monitor Traffic

On the Deployability of Inter-As Spoofing Defenses

IP Spoofing DDoS Defense Using Active IP Record and ICMP Message

Detection and Defence of DNS Spoofing Attack

Study on ARP Spoofing Attack Detection and Defense Technology

Detection and Defense Against Network Isolation Attacks in Software‐defined Networks

Research on ARP Spoof Detection Strategies in Unreliable LAN.

VASE: Filtering IP spoofing traffic with agility

Misuse Detection in Large-scale Network for Network Security Management Systems

Detection and Protection Against Network Scanning: IEDP

An Intruder Locating System Based on Network Intrusion Detection

A Novel Mechanism for Detection of Address Resolution Protocol Spoofing Attacks in Large-Scale Software-Defined Networks