Abstract:Dependence on the Internet is increasing dramatically. Therefore, many researchers have given great attention to the issue of how to tighten Internet security. This study proposes a new scheme for the distributed intrusion prevention system (DIPS), in which the concept of ‘union’ is presented for satisfying the increasing requirements of Internet security issues. In this proposed design, the network intrusion detection system (NIDS) applies a misuse detection technique to detect well‐known intrusion behavior on the Internet. Meanwhile, for anomaly detection technique, a tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to reveal previously undiscovered intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service (DDoS) attacks inside the protected allied network is also covered. To increase the detection accuracy, reduction of false positives and false negatives is also accomplished. Experimental results reveal that the suggested network security system scheme is effective and efficient in resolving the intrusion activity problem of real network environments. Copyright © 2011 John Wiley & Sons, Ltd. In this work, a new system scheme of the allied distributed intrusion prevention system was implemented to meet the increasing Internet security issues. A network intrusion detection system (NIDS) applies misuse detection technique to detect well‐known intrusion behaviors on the Internet. Meanwhile, for anomaly detection technique, a designed tool named ‘Scent’ (a network traffic sniffer) is combined with conditional legitimate probability to find out new intrusion packets that do not match the intrusion signatures in NIDS. Moreover, blocking distributed denial‐of‐service attacks inside the protected allied network is also designed. To increase the detection accuracy, reducing false positive and false negative are also accomplished.

Network Intrusion Detection and Prevention

Intrusion detection techniques in network environment: a systematic review

Intrusion Prevention System for Website Attacks

An overview of Intrusion Detection and Prevention Systems

Evaluation of Network Based IDS and Deployment of multi-sensor IDS

Intrusion detection techniques and approaches

Indra: A Distributed Approach to Network Intrusion Detection and Prevention

Exploring the landscape of network security: a comparative analysis of attack detection strategies

Survey of intrusion detection systems: techniques, datasets and challenges

Intrusion Techniques: Comparative Study of Network Intrusion Detection Systems

Network intrusion detection system: A systematic study of machine learning and deep learning approaches

Survey of Network Intrusion Detection Methods from the Perspective of the Knowledge Discovery in Databases Process

A Survey on Anomaly Based Host Intrusion Detection System

An overview of anomaly detection techniques: Existing solutions and latest technological trends

Anomaly-based network intrusion detection: Techniques, systems and challenges

An integrated intrusion detection system using correlation‐based attribute selection and artificial neural network

An Efficient Network Intrusion Detection and Classification System

Problems of Network-based Intrusion Detection System and Their Countermeasures

Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions

A comparison of Intrusion Detection systems

Intrusion detection systems for software-defined networks: a comprehensive study on machine learning-based techniques