NDLI: A correlative context-based framework for network intrusion detection system

Content Provider	IEEE Xplore Digital Library
Author	Ye Wang Abdel-Wahab, H.
Copyright Year	2005
Description	Author affiliation: Dept. of Comput. Sci., Old Dominion Univ., Norfolk, VA, USA (Ye Wang; Abdel-Wahab, H.)
Abstract	Intrusion detection system (IDS) is one of the most important security protection mechanisms. Although many IDS commercial products and research projects exist, we still face a serious problem under current systems, a high false positive rate. We observe that current network IDSs don't make full use of the information available from different levels and points of the protected network, and we argue that the utilization of this information is essential. We introduce a new framework for network IDSs based on a network context awareness (NCA) layer as an additional data source to IDSs. We describe the architecture of NCA and methods of how to extract network information into NCA. A correlation engine is presented that works on alerts generated by a specific IDS system (Snort) and NCA information. Our experimental results using simulated attacks show that our proposed solution significantly reduces the false alarm rate and has the potential to greatly improve the efficacy of detecting novel attacks.
Starting Page	463
Ending Page	468
File Size	174239
Page Count	6
File Format	PDF
ISBN	0769523730
ISSN	15301346
DOI	10.1109/ISCC.2005.6
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2005-06-27
Publisher Place	Spain
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Intrusion detection Protection Face detection Data mining Humans Context awareness Computational modeling Statistics Computer science Computer security
Content Type	Text
Resource Type	Article
Subject	Signal Processing Mathematics Computer Networks and Communications Computer Science Applications Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

An information protection system for intranets

Aggregating Distributed Sensor Data for Network Intrusion Detection

A Feature Selection Approach for Network Intrusion Detection

Intrusion detection framework of cluster-based wireless sensor network

Intrusion detection framework of cluster-based wireless sensor network

Data Mining Approaches for Signatures Search In Network Intrusion Detection

Computational ontology of network operations

FIDRAN: a flexible intrusion detection and response framework for active networks

Nethost-sensor: a novel concept in intrusion detection systems

A correlative context-based framework for network intrusion detection system

Similar Documents

An information protection system for intranets

Aggregating Distributed Sensor Data for Network Intrusion Detection

A Feature Selection Approach for Network Intrusion Detection

Intrusion detection framework of cluster-based wireless sensor network

Intrusion detection framework of cluster-based wireless sensor network

Data Mining Approaches for Signatures Search In Network Intrusion Detection

Computational ontology of network operations

FIDRAN: a flexible intrusion detection and response framework for active networks

Nethost-sensor: a novel concept in intrusion detection systems

A correlative context-based framework for network intrusion detection system