NDLI: A parallel technique for improving the performance of signature-based network intrusion detection system

Content Provider	IEEE Xplore Digital Library
Author	Shiri, F.I. Shanmugam, B. Idris, N.B.
Copyright Year	2011
Description	Author affiliation: Advanced Informatic School, Universiti Teknologi Malaysia, Kuala Lumpur, Malaysia (Shiri, F.I.; Shanmugam, B.; Idris, N.B.)
Abstract	Nowadays, organizations discover that it is essential to protect their valuable information and internal resources from unauthorized access like deploying firewall. Firewall could prevent unauthorized access, but it cannot monitor network attacks. Another network security tool such as intrusion detection system is necessary to perform network activities monitoring. With the recent trend of high-speed networks, a large volume of data should be analyzed and processed with high-speed infrastructure. To promote the performance of network intrusion detection system and reduce the processing time of the traffic, present studies on network intrusion detection system for high-speed network focus on parallel techniques as an alternative. In this paper, a kind of parallelism is proposed to improve the performance of signature based intrusion detection system. The experimental results show that by the use of two signature based network intrusion detection systems running Snort in parallel with a portion of packets and a subset of rules, and distributing the traffic between them, the processing time of the traffic will be reduced. Consequently, the performance of the system will be improved.
Starting Page	692
Ending Page	696
File Size	1442107
Page Count	5
File Format	PDF
ISBN	9781612844855
e-ISBN	9781612844862
DOI	10.1109/ICCSN.2011.6014986
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-05-27
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	nort Analytical models Fires Logic gates Parallelism Hardware Network Intrusion Detection System Internet Signature-based Servers Function Paralle Local area networks
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

The research and design of honeypot system applied in the LAN security

NetFlow based intrusion detection system

Development of Network User Authentication Gateway System Using "High Performance Packet Processing Engine"

A hybrid data mining based intrusion detection system for wireless local area networks.

Anomaly-based intrusion detection using distributed intelligent systems

Research on Cooperative Anti-Worm System Model Based on Distributed Honeypots

An Intrusion Detection System Based on Network Processor

Data mining aided signature discovery in network-based intrusion detection system

A Parallel Architecture for Stateful, High-Speed Intrusion Detection (2008)

A parallel technique for improving the performance of signature-based network intrusion detection system

Similar Documents

The research and design of honeypot system applied in the LAN security

NetFlow based intrusion detection system

Development of Network User Authentication Gateway System Using "High Performance Packet Processing Engine"

A hybrid data mining based intrusion detection system for wireless local area networks.

Anomaly-based intrusion detection using distributed intelligent systems

Research on Cooperative Anti-Worm System Model Based on Distributed Honeypots

An Intrusion Detection System Based on Network Processor

Data mining aided signature discovery in network-based intrusion detection system

A Parallel Architecture for Stateful, High-Speed Intrusion Detection (2008)

A parallel technique for improving the performance of signature-based network intrusion detection system