A Fast and Reliable IDS Analyzer

Publish Year: 1385
نوع سند: مقاله کنفرانسی
زبان: English
View: 2,706

This Paper With 6 Page And PDF Format Ready To Download

  • Certificate
  • من نویسنده این مقاله هستم

استخراج به نرم افزارهای پژوهشی:

لینک ثابت به این Paper:

شناسه ملی سند علمی:

ICEE14_192

تاریخ نمایه سازی: 25 تیر 1387

Abstract:

Intrusion detection systems (IDSs) are one of the most important issues in the field of network security. These systems usually use databases to store and log the alerts which have been detected by IDS sensors from the network traffic. One of the main problems which can be encountered is generating a huge amount of data and storing them in the database. This amount of data makes database very slow and at more data makes it unusable until data has been removed from database by administrators. In this paper we apply a two level data management approaches that remove old data from database. In this method, we abstract the database in a second level table and keep the number of entries in this table less than a predefined threshold. This method makes our IDS analyzer fast enough even when there is a long time attack.

Keywords:

IDS analyzer , Intrusion Detection System (IDS) , snort

Authors

Mahboobeh Soleimani

Network Department, IPM, Tehran, Iran.

Akbar Behzadi

Network Department, IPM, Tehran, Iran.

Maghsoud Abbaspour

Network Department, IPM, Tehran, Iran.School of Electrical and Computer Eng., Shahid Beheshti University, Tehran, Iran.

مراجع و منابع این Paper:

لیست زیر مراجع و منابع استفاده شده در این Paper را نمایش می دهد. این مراجع به صورت کاملا ماشینی و بر اساس هوش مصنوعی استخراج شده اند و لذا ممکن است دارای اشکالاتی باشند که به مرور زمان دقت استخراج این محتوا افزایش می یابد. مراجعی که مقالات مربوط به آنها در سیویلیکا نمایه شده و پیدا شده اند، به خود Paper لینک شده اند :
  • George Cora , Leigh Purdie, Co mprehensive Event Log Monitoring, ...
  • Lambert Schaelicke, Matthew R. Geiger, Curt J. Freeland, Importing the ...
  • M. Roesch, Snort _ Lightweight Intrusion Detection for Networks, Proc. ...
  • L. Schaelicke, T. Slabach, B. Moore and C. Freeland, C ...
  • Hideki Koike, Kazuhiro Ohno, SnortView: visualization system of snort logs, ...
  • نمایش کامل مراجع