NDLI: Supporting interoperability to heterogeneous IDS in secure networking framework

Content Provider	IEEE Xplore Digital Library
Author	Sang-Kil Park Ki-Young Kim Jong-Soo Jang Bong-Nam Noh
Copyright Year	2003
Description	Author affiliation: Inf. Security Res. Div., Electron. & Telecommun. Res. Inst., Taejeon, South Korea (Sang-Kil Park; Ki-Young Kim; Jong-Soo Jang)
Abstract	On 22 October 2002, ICANN, the Internet's main governing body, acknowledged that a massive distributed denial-of-service attack briefly shut down seven of the 13 central Domain Name Services servers that manage Internet traffic worldwide. Prompt action by DNS server operators minimized the duration and impact of the attack, which had little effect on overall Internet performance. Intrusion detection systems are researched and developed to detect attacks from outside world since 1980. Intrusion detection systems create an alert data or log data when detect an intrusion. But Many IDS uses heterogeneous data set, so these data must be mapped to another format. IDWG in IETF proposed IDMEF. This paper designs an alert data format compatible IDMEF. The secure networking framework is consisted of SGS and CPCS. SGS acts as an intrusion detection system on edge of network ingress point, and CPCS acts as a higher-level server. SGS makes an alert data compatible IDMEF and sends it to CPCS. CPCS parses an IDMEF alert data and makes an alert object for using correlation analysis. SGS can see its area only, but CPCS can see wide network area. CPCS can detect more complex attacks as well as support integrated management through cooperating each other. In the view of alert processing we converted raw alert data to Ladon-alert data to support interoperability. We use IDMEF-compatible alert datat structure. We have designed and developed integrated IDS on gateway, and security control server on higher-level class. Then this framework offers cooperative intrusion detection, policy based controlling.
Sponsorship	Telekon Malaysia Berhad
Starting Page	844
Ending Page	848
File Size	367114
Page Count	5
File Format	PDF
ISBN	0780381149
DOI	10.1109/APCC.2003.1274479
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2003-09-21
Publisher Place	Malaysia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Intrusion detection Intelligent networks Web server Network servers Web and internet services Cities and towns Information security Computer science Electronic mail Data security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

SS-IDS: Statistical Signature Based IDS

Secure group services for storage area networks

SCIT and IDS architectures for reduced data ex-filtration

Polymorphic Worm Detection Using Double-Honeynet

EINet: a secure, open network for electronic commerce

The Milan Civic Network experience and its roots in the town

Providing Secure Services in Peer-to-Peer Communications Networks with Central Security Servers

Efficient ID transmission method in RFID networks

Efficient detection of failure modes in electronic commerce protocols

Supporting interoperability to heterogeneous IDS in secure networking framework

Similar Documents

SS-IDS: Statistical Signature Based IDS

Secure group services for storage area networks

SCIT and IDS architectures for reduced data ex-filtration

Polymorphic Worm Detection Using Double-Honeynet

EINet: a secure, open network for electronic commerce

The Milan Civic Network experience and its roots in the town

Providing Secure Services in Peer-to-Peer Communications Networks with Central Security Servers

Efficient ID transmission method in RFID networks

Efficient detection of failure modes in electronic commerce protocols

Supporting interoperability to heterogeneous IDS in secure networking framework