On optimizing load balancing of intrusion detection and prevention systems

Proceedings - IEEE INFOCOM

Volumn , Issue , 2008, Pages

  Le, Anh ^a   Al Shaer, Ehab ^a,b   Boutaba, Raouf ^a  

^a UNIVERSITY OF WATERLOO   (Canada)

^b DEPAUL UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BALANCING; BOOLEAN FUNCTIONS; COMPUTER NETWORKS; INTERNET; LOSS PREVENTION; OPTIMIZATION; REAL TIME SYSTEMS;

INFOCOM; LOAD BALANCING;

PROBLEM SOLVING;

EID: 51049116250     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2008.4544576     Document Type: Conference Paper

References (12)

1. L. Schaelicke, K. Wheeler, and C. Freeland, "SPANIDS: A scalable network intrusion detection loadbalancer," in Proc. of the 2nd conference on Computing Frontiers, 2005, pp. 315-322.
2. M. Vallentin, R. Sommer, J. Lee, C. Leres, V. Paxson, and B. Tierney, "The NIDS cluster: Scalable, stateful network intrusion detection on commodity hardware," in Proc. of the Symp. on RAID'07, Queensland, Australia, Sep. 2007.
3. Technical report: On optimizing load balancing of intrusion detection and prevention systems. [Online]. Available: http://www.cs.uwaterloo.ca/%7Ea4le/ project.html
4. C. Aggarwal, J. Han, J. Wang, and P. S. Yu, "A framework for clustering evolving data streams," in Proc. of the 29th VLDB, vol. 29, 2003, pp. 81-92.
5. L. Kaufman and P. Rousseeuw, Finding Groups in Data. An Introduction to Cluster Analysis. Wiley, Mar. 1990.
6. J. Mirkovic and P. Reiher, "A taxonomy of DDoS attack and DDoS defense mechanisms," ACM SIGCOMM Computer Communication Review, vol. 34, no. 2, pp. 39-53, Apr. 2004.
7. Libpcap. [Online]. Available: http://www.tcpdump.org/
8. T. Peng, C. Leckie, , and R. Kotagiri, "Proactively detecting distributed denial of service attacks using source ip address monitoring," in Proc. of the Third International IFIP-TC6 Networking Conference, 2004, pp. 771-782.
9. C. Kruegel, F. Valeur, G. Vigna, and R. Kemmerer, "Stateful intrusion detection for high-speed networks," in Proc. of the IEEE SSP'02, 2002, pp. 285-293.
10. S. Guha, A. Meyerson, N. Mishra, R. Motwani, and L. O'Callaghan, "Clustering data streams: Theory and practice," IEEE Tran. on KDE, vol. 15, no. 3, pp. 515-528, Mar. 2003.
11. P. Wheeler and E. Fulp, "Taxonomy of parallel techniques for intrusion detection," in Proc. of ACM 45th Southeast Regional Conference, 2007, pp. 278-282.
12. K. Xinidis, I. Charitakis, S. Antonatos, K. G. Anagnostakis, and E. P. Markatos, "An active splitter architecture for intrusion detection and prevention," IEEE Transactions on Dependable and Secure Computing, vol. 3, no. 1, pp. 31-44, Mar. 2006.