首页> 外文会议>International Conference on Computer Application and System Modeling >A network intrusion detection system with the snooping agents
【24h】

A network intrusion detection system with the snooping agents

机译:具有侦探代理的网络入侵检测系统

获取原文

摘要

In order to increase the protection ability of the network intrusion diction system (NIDS), it is important to gather the host information of the intruder. In the proposed IDS called NIDS-SA, three basic components are developed to support the active monitoring capability, Intrusion Detection Node (IDN), Intrusion Detection Coordinator (IDC), and Snooper Agent (SA). The IDN is used to capture packets, de-multiplex packets, detect local intrusion and infer intrusion. The IDC is installed in an administration workstation for communicating and managing IDNs, it can also do the intrusion detection and intrusion inferring. The RA consists of several snoop functions for information gathering. After an attack behavior is detected, the RA may launch some kinds of information gathering functions to the attacker, so that the proposed NIDS-SA has the active snoop ability. Furthermore, NIDS-SA includes the functions of the pattern matching and statistical inference. To ensure the secure communication ability between IDC and IDNs, the cryptography-based mechanisms are applied in the design phase of the proposed NIDS-SA. An intrusion detection experiment is carried out in our campus to simulate the real attack scenarios and validate the performance of NIDS-SA.
机译:为了提高网络入侵译码系统(NIDS)的保护能力,重要的是收集入侵者的主机信息。在称为NIDS-SA的拟议ID中,开发了三个基本组件以支持主动监控能力,入侵检测节点(IDN),入侵检测协调器(IDC)和Snooper代理(SA)。 IDN用于捕获分组,解复用分组,检测本地入侵和推断入侵。 IDC安装在管理工作站中以进行通信和管理IDN,也可以进行入侵检测和入侵推断。 RA由几个用于信息收集的Snoop函数组成。在检测到攻击行为后,RA可能会向攻击者发出某些类型的信息收集功能,以便提出的NIDS-SA具有主动窥探能力。此外,NIDS-SA包括模式匹配和统计推断的功能。为确保IDC和IDN之间的安全通信能力,基于加密的机制应用于所提出的NIDS-SA的设计阶段。在我们的校园内进行入侵检测实验,以模拟实际攻击方案并验证NIDS-SA的性能。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号