High speed NIDS using dynamic cluster and comparator logic

Proceedings - 10th IEEE International Conference on Computer and Information Technology, CIT-2010, 7th IEEE International Conference on Embedded Software and Systems, ICESS-2010, ScalCom-2010

Volumn , Issue , 2010, Pages 575-581

  Akhlaq, Monis ^a   Alserhani, Faeiz ^a   Subhan, Ahsan ^a   Awan, Irfan Ullah ^a   Mellor, John ^a   Mirchandani, Pravin ^a,b  

^a UNIVERSITY OF BRADFORD   (United Kingdom)

^b Syphan Technologies   (United Kingdom)

Author keywords

Comparator logic; Dynamic cluster; Intrusion detection systems (IDS); Loadbalancer; Plugins; Policy routing; Snort

Indexed keywords

COMPARATOR LOGIC; DYNAMIC CLUSTER; INTRUSION DETECTION SYSTEMS (IDS); LOADBALANCER; PLUG-INS; POLICY ROUTING; SNORT;

CLUSTER COMPUTING; COMPARATORS (OPTICAL); COMPUTER CRIME; COMPUTER HARDWARE; EMBEDDED SOFTWARE; EMBEDDED SYSTEMS; INFORMATION TECHNOLOGY; RECOVERY;

INTRUSION DETECTION;

EID: 78249259709     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CIT.2010.120     Document Type: Conference Paper

References (23)

1. Faeiz Alserhani, Monis Akhlaq et al, "Evaluating Intrusion Detection Systems in High Speed Networks" in Press, Fifth International Conference of Information Assurance and Security (IAS 2009), IEEE Computer Society to be held in Xian, China, 18 - 20 Aug, 2009.
2. Monis Akhlaq, Faeiz Alserhani et al, "Virtualization Efficacy for NIDS in High Speed Environments", Information Security and Digital Forensics, LNCS, vol 41, 2010, pp. 26-41. ISBN: 978-3-642-11529-5, 2010.
3. Faeiz Alserhani, Monis Akhlaq et al, "Snort Performance Evaluation" in the proceedings of Twenty Fifth UK Performance Engineering Workshop (UKPEW 2009), Leeds, UK, 6-7 July 2009.
4. "Snort". [Online]. Available: www.Snort.org.
5. Paxson, V., Asanovic, K., Dharmapurikar, S., Lockwood, J., Pang, R., Sommer, R., Weaver, N.: Rethinking Hardware Support for Network Analysis and Intrusion Prevention. In: Proc. USENIX Hot Security. (2006).
6. Andrew R Baker, Joel Esler, "Snort IDS and IPS Toolkit," Syngress, Canada, 2007.
7. Kerry Cox, Christopher Gerg, "Managing Security with Snort and IDS Tools", O'Reilly, USA, 2004. ISBN: 0-596-0061-6.
8. Linux 2.6, http://www.kernel.org.
9. Ahsan Subhan, Monis Akhlaq et al, "Smart Logic - Preventing Packet Drop in High Speed Network Intrusion Detection Systems", Information Security and Digital Forensics, LNCS, vol 41, 2010, pp 57-67. ISBN: 978-3-642-11529-5.
10. ProCurve Series 2900 switch. [Online]. Avalaiable: http://www.hp.com/rnd/ products/switches/HP-ProCurve.
11. LAN Traffic V 2. [Online]. Available: http://www.topshareware.com/lan- traffic-v2/downloads/1.html.
12. D-ITG V 2.6. [Online]. Available: http://www.grid.unina.it/Traffic/index. php.
13. Xinidis, K., Anagnostakis, K.G., Markatos, E.P., "Design and implementation of a high-performance network intrusion prevention system" in: SEC, Springer (2005).
14. Schaelicke, L., Wheeler, K., Freeland, C.: SPANIDS: A Scalable Network Intrusion Detection Loadbalancer. In: Proc. Computing Frontiers Conference. (2005).
15. M. Vallentin, R. Sommer, J. Lee, C. Leres, V. Paxson, and B. Tierney, "The NIDS cluster: Scalable, stateful network intrusion detection on commodity hardware," in Proc. of the Symp. on RAID'07, Queensland, Australia, Sep. 2007.
16. Vern Paxson, Computer Networks: The International Journal of Computer and Telecommunications Networking archive Volume 31, Issue 23-24 (December 1999) table of contents, 1999, pp. 2435 - 2463. ISSN:1389-1286.
17. A. Le, E. Al-Shaer, and R. Boutaba, "On Optimizing Load balancing of Intrusion Detection and Prevention Systems," Proc. of the IEEE INFOCOM Workshops 2008, pp. 1-6, Phoenix, AZ, USA, Apr 13-18, 2008.
18. C. Aggarwal, J. Han, J. Wang, and P. S. Yu, "A framework for clustering evolving data streams," in Proc. of the 29th VLDB, vol. 29, 2003, pp. 81-92.
19. Dreger, H.: Operational Network Intrusion Detection: Resource-Analysis Tradeoffs.PhD thesis, TU München (2007).
20. "Top layer". [Online]. Avalaiable: www.toplayer.com.
21. Kruegel, C., Valeur, F., Vigna, G., Kemmerer, R.A.: Stateful Intrusion Detection for High-Speed Networks. In: Proc. IEEE Symposium on Research on Security and Privacy. (2002).
22. "F5 Networks". [Online]. Available: www.f5.com.
23. "Radware". [Online]. Available: www.radware.com.