Trusted intrusion detection architecture for high-speed networks based on traffic classification, load balancing and high availability mechanism

Security and Communication Networks

Volumn 4, Issue 4, 2011, Pages 384-394

  Meharouech, Sourour ^a   Bouhoula, Adel ^a   Abbes, Tarek ^a  

^a UNIVERSITY OF CARTHAGE   (Tunisia)

Author keywords

High availability; High speed network; Intrusion detection system; Load balancing; Network security; Traffic classification

Indexed keywords

COMPUTER CRIME; COMPUTER SYSTEM FIREWALLS; COMPUTER VIRUSES; HIGH SPEED NETWORKS; INTRUSION DETECTION; NETWORK ARCHITECTURE; RESOURCE ALLOCATION; SPEED; TELECOMMUNICATION TRAFFIC;

EXPERIMENTAL EVALUATION; HIGH AVAILABILITY; INTRUSION DETECTION SYSTEMS; NETWORK INTRUSION DETECTION SYSTEMS; NETWORK THROUGHPUT; SECURITY ANALYSIS; SECURITY MECHANISM; TRAFFIC CLASSIFICATION;

NETWORK SECURITY;

EID: 79953037239     PISSN: 19390114     EISSN: 19390122     Source Type: Journal    
DOI: 10.1002/sec.161     Document Type: Article

References (11)

1. Power R. CSI/FBI Computer Crime and Security Survey, Computer Security Institute, Computer Security Issues and Trends VII (1) (2001), 2001.
2. Schaelicke L, Slabach T, Moore B, Freeland C. Characterizing the Performance of Network Intrusion Detection Sensors. In Proceedings of Recent Advances in Intrusion Detection, RAID 2003, LNCS 2820, Springer-Verlag, Berlin, Heidelberg, 155-172.
3. McAlerney J, Coit C, Staniford S. Towards faster string matching for intrusion detection or exceeding the speed of snort. DARPA Information Survivability Conference and Exposition, Anaheim, California, June 2001; 367-373.
4. Yanga W, Fanga B-X, Liub B, Zhanga H-L. Intrusion Detection System for High-Speed Network. Computer Network and Information Security Technique Research Center. Harbin Institute of Technology: Harbin 150001, China, March 2004.
5. Sekar R, Guang V, Verma S, Shanbhag T. A high-performance network intrusion detection system. Proceedings of the 6th ACM Conference on Computer and Communications Security. November 1999.
6. Fisk M, Varghese G. Fast content-based packet handling for intrusion detection. Technical Report CS2001-0670, Department of Computer Science and Engineering, University of California, San Diego, June 2001.
7. Kruegel C, Valeur F. Stateful intrusion detection for high-speed networks. Santa Barbara: Reliable Software Group, University of California. In Proceedings of the IEEE Symposium on Research on Security and Privacy. Oakland, CA, May 2002; IEEE Press.
8. Charitakis I, Anagnostakis K, Markatos E. An active traffic splitter architecture for intrusion detection. Proceedings of 11th IEEE/ACM International Symposium on Modeling. Analysis and Simulation of Computer and Telecommunication Systems (MASCOTS 2003), Orlando, October 2003; 238-241.
9. ISS. BlackICE Sentry Gigabit., November 2001.
10. CISCO. CISCO Intrusion Detection System. Technical Information, November 2001.
11. Inc. Top Layer Networks. IDS balancer with etrust intrusion detection., January 2004.