Implementation and evaluation of network intrusion detection systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5233, Issue , 2011, Pages 988-1016

  Akhlaq, Monis ^a   Alserhani, Faeiz ^a   Awan, Irfan ^a,b   Mellor, John ^a   Cullen, Andrea J ^a   Al Dhelaan, Abdullah ^b  

^a UNIVERSITY OF BRADFORD   (United Kingdom)

^b KSU ^*  (Saudi Arabia)

Author keywords

Host platform; Network Intrusion Detection Systems (NIDS); operating systems (OS); packet drop; performance evaluation; Snort; Traffic; virtual platform

Indexed keywords

COMPUTER CRIME; DROPS; OPEN SYSTEMS; PACKET LOSS; TELECOMMUNICATION TRAFFIC;

HOST PLATFORM; NETWORK INTRUSION DETECTION SYSTEMS; PACKET DROPS; PERFORMANCE EVALUATION; SNORT; VIRTUAL PLATFORM;

INTRUSION DETECTION;

EID: 79955858211     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-02742-0_42     Document Type: Article

References (34)

1. John, D., Tessel, S., Young, F.L.: The Hackers Handbook. Auerbach Publications, New York (2004)
2. Intrusion Detection Systems (IDS) Part 2, Classification; methods; techniques, http://www.windowsecurity.com/articles/ IDS-Part2-Classification- methods-techniques.html04
3. Infrastructure Security Report- ARBOR Networks, http://www.arbornetworks. com/report
4. Snort, http://www.Snort.org
5. Paulauskas, N., Sjudutis, J.: Investigation of the Intrusion Detection System "Snort" Performance. Journal of Electrical and Electronics Engineering (2008)
6. Andrew, R.B., Joel, E.: Snort IDS and IPS Toolkit, Syngress, Canada (2007)
7. Case, J., Fedor, M., Schoffstall, M., Davin, J.: Simple Network Management Protocol (SNMP), Network Security Research Group, RFC 1157 (1990)
8. Wu, S., Manber, U.: AGREP, A Fast Approximate Pattern-Matching Tool. In: Proc. of USENIX Winter 1992 Technical Conference, San Francisco, CA, pp. 153-162 (1992)
9. ProCurve Series 2900 Switch, http://www.hp.com/rnd/products/switches/ HP-ProCurveSwitch2900Seriesoverview.htm
10. Akhlaq, M., Alserhani, F., Awan, I.U., Mellor, J., Cullen, A.J., Mirchandani, P.: Virtualization Efficacy for Network Intrusion Detection Systems in High-speed Networks. In: Weerasinghe, D. (ed.) IS&DF, vol. 41, pp. 26-41. Springer, Heidelberg (2010)
11. NetCPS, http://www.netchain.com/NetCPS
12. Tfgen, http://www.st.rim.or.jp/~yumo/pub/tfgen
13. Http Traffic Generator, http://www.nsauditor.com/
14. LAN Traffic V2, http://www.topshareware.com/lan-traffic-v2/ downloads/1.htm
15. D-ITG V2.6, http://www.grid.unina.it/Traffic/index.php
16. Hping V 2, http://www.hping.org/download.html
17. Metasploit Framework, http://www.metasploit.com/
18. Bandwidth Monitor, http://www.sourceforge.net/projects
19. Nload, http://www.sourceforge.net/projects/nload/
20. Windows XP SP2, http://www.softwarepatch.com/windows/xpsp2.html
21. Linux 2.6, http://www.kernel.org/
22. Windows Server 2008, http://www.microsoft.com/windows-server2008/ en/us/default.aspx
23. Free BSD 7.1, http://www.freebsd.org/where.html
24. An Introduction to Virtualization, http://www.kernelthread.com/ publications/virtualization
25. Business value of virtualization: Realizing the benefits of integrated solutions, http://h18000.www1.hp.com/products/servers/management/vse/ Biz-Virtualization-WhitePaper.pdf
26. Virtualization, http://www.windowsecurity.com/whitepapers/ Virtualization.html
27. Linux NAPI, http://www.linuxfoundation.org/collaborate/ workgroups/networking/napi
28. Berkley Packet Filter, http://www.freebsd.org/releases/ 7.1R/relnotes.htm
29. VM Ware Server, http://www.vmware.com/products/server/
30. SATA Technology, http://www.serialata.org/
31. Disk Queue Length Counter, http://www.windowsnetworking.com/ articles-tutorials/
32. Alserhani, F., Akhlaq, M., Awan, I.U., Cullen, A.J., Mellor, J., Mirchandani, P.: Evaluating Intrusion Detection Systems in High Speed Networks. In: Proceeding of Fifth IEEE Conf. of Information Assurance and Security, IAS (2009)
33. Subhan, A., Akhlaq, M., Alserhani, F., Awan, I., Cullen, A., Mellor, J., Mirchandani, P.: Smart Logic-Preventing Packet Drop in High Speed Network Intrusion Detection Systems. In: Weerasinghe, D. (ed.) IS&DF, vol. 41, pp. 57-65. Springer, Heidelberg (2010)
34. Akhlaq, M., Alserhani, F., Subhan, A., Awan, I.U., Mellor, J., Mirchandani, P.: High Speed NIDS using Dynamic Cluster and Comparator Logic. In: Proc. of 2010 IEEE 10th International Conference on Computer and Information Technology (CIT), pp. 575-581 (2010)