Improving network intrusion detection system performance through quality of service configuration and parallel technology

Journal of Computer and System Sciences

Volumn 81, Issue 6, 2015, Pages 981-999

  Bul'ajoul, Waleed ^a   James, Anne ^a   Pannu, Mandeep ^b  

^a Institute for Clean Growth and Future Mobility   (United Kingdom)

^b KWANTLEN POLYTECHNIC UNIVERSITY   (Canada)

Author keywords

Intrusion detection system; Intrusion protection system; Network security; Parallel processing; Quality of Service; Switch configuration

Indexed keywords

CATALYSTS; COMPUTER CRIME; HIGH SPEED NETWORKS; INTRUSION DETECTION; NETWORK SECURITY; SOFTWARE DESIGN;

ANALYTICAL PERFORMANCE; CONFIGURATION TECHNOLOGY; INTRUSION DETECTION SYSTEMS; INTRUSION PROTECTION SYSTEMS; NETWORK INTRUSION DETECTION; NETWORK INTRUSION DETECTION SYSTEMS; PARALLEL PROCESSING; SWITCH CONFIGURATION;

QUALITY OF SERVICE;

EID: 84928269589     PISSN: 00220000     EISSN: 10902724     Source Type: Journal    
DOI: 10.1016/j.jcss.2014.12.012     Document Type: Article

References (35)

1. J. Jang-Jaccard, and S. Nepal A survey of emerging threats in cybersecurity J. Comput. Syst. Sci. 80 5 2014 973 993
2. A. Fuchsberger Intrusion detection systems and intrusion prevention systems Inf. Secur. Tech. Rep. 10 2005 134 139 http://www.sciencedirect.com.lcproxy.shu.ac.uk/science/article/pii/S1363412705000415 Accessed September 14, 2013
3. Arbor Networks 9th annual worldwide infrastructure security report and ATLAS data http://www.arbornetworks.com/resources/infrastructure-security-report 2013 Accessed March 25, 2014
4. E. Albin, and N.C. Rowe A realistic experimental comparison of the Suricata and Snort intrusion-detection systems Workshops of the 26th International Conference on Advanced Information Networking and Applications WAINA 2012 IEEE 122 127
5. F.I. Shiri, B. Shanmugam, and N.B. Idris A parallel technique for improving the performance of signature-based network intrusion detection system Proceedings of 3rd International Conference Communication Software and Networks ICCSN 2011 IEEE 692 696
6. J. Beale, B. Caswell, T. Kohlenberg, and M. Poor Snort 2.1 Intrusion Detection second ed. 2004 Syngress Publishing
7. H. Jiang, G. Zhang, G. Xie, K. Salamatian, L. Mathy, Scalable high-performance parallel design for network intrusion detection systems on many-core processors, in: Proceedings of the ninth ACM/IEEE symposium on Architectures for networking and communications systems, IEEE, pp. 137-146.
8. W. Bul'ajoul, A. James, and M. Pannu Network intrusion detection systems in high-speed traffic in computer networks Proceedings of 10th International Conference on e-Business Engineering ICEBE 2013 IEEE 168 175
9. G.M. Nazer, and A.A.L. Selvakumar Current intrusion detection techniques in information technology - a detailed analysis Eur. J. Sci. Res. 65 2011 611 624
10. S. Beg, U. Naru, M. Ashraf, and S. Moshin Feasibility of intrusion detection system with high performance computing: a survey Int. J. Adv. Comput. Sci. 1 2010 26 35
11. K. Scarfone, and P. Mell Guide to Intrusion Detection and Prevention Systems (IDPS) Recommendations of the National Institute of Standards and Technology, NIST Special Publication 800-94 2012
12. A. Patcha, and J. Park An overview of anomaly detection techniques: existing solutions and latest technological trends Comput. Netw. 51 2007 3448 3470
13. W. Jiang, H. Song, and Y. Dai Real-time intrusion detection for high-speed networks Comput. Secur. 24 2005 287 294
14. D. Mudzingwa, and R. Agrawal A study of methodologies used in intrusion detection and prevention system (IDPS) Proceedings of IEEE Southeastcon 2012 1 6
15. Cisco Systems Cisco ASA 5585-X adaptive security appliance n.d. http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/product-data-sheet0900aecd802930c5.html 2014 Accessed July 17
16. T.M. Wu Intrusion Detection Systems Intrusion Assurance Technology Analysis Center, Herndon, VA sixth ed. 2009 http://iac.dtic.mil/csiac/download/intrusion-detection.pdf 2009 Accessed September 15, 2013
17. H. Kozushko, Intrusion detection: host-based and network-based intrusion detection systems, Independent study, 2003.
18. M.S. Hoque, M.A. Mukit, and M.A. Bikas An implementation of intrusion detection system using genetic algorithm Int. J. Netw. Secur. Appl. IV 2012 111 112
19. Cisco Systems Cisco Catalyst 3560 Series switches n.d. http://www.cisco.com/en/US/products/hw/switches/ps5528/ 2013 Accessed October 11
20. M. Roesch, and M. Snort Lightweight intrusion detection for networks Proceedings of the Conference on Large Installation System Administration LISA vol. 99 1999 229 238
21. R.U. Rahman Intrusion Detection System with Snort: Advanced IDS Techniques with Snort, Apache, PHP, MySQL and ACID 2003 Pearson Education and Prentice Hall Professional
22. R. Chi Intrusion detection system based on Snort Proceedings of the 9th International Symposium on Linear Drives for Industry Applications vol. 3 2014 Springer Heidelberg, Berlin 657 664
23. Cisco Systems Quality of service design overview n.d. http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN-and-MAN/QoS-SRND/QoSIntro.html 2013 Accessed October 20
24. Cisco Systems, Understanding queuing with hierarchical queuing framework, http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6558/sol-ov-c22-708224.html. Accessed November 15, 2012.
25. H.J. Kim, A. Pamnami, and M. Patel State-of-the-Art in Intrusion Detection Systems 2007 Department of Electrical and Computer Engineering Stevens Institute of Technology Hoboken
26. M. Jamshed, J. Lee, S. Moon, I. Yun, D. Kim, S. Lee, Y. Yi, and K.S. Park Kargus A highly-scalable software-based intrusion detection system Proceedings of the 2012 ACM Conference on Computer and Communications Security 2012 ACM 317 328
27. K.R. Karthikeyan, and A. Indra Intrusion detection tools and techniques-a survey Int. J. Comput. Theory Eng. 2 2010 901 906
28. P. Mehra A brief study and comparison of Snort and Bro Open source network intrusion detection system Int. J. Adv. Res. Comput. Commun. Eng. 1 6 2012 383 386
29. K. Salah, and A. Qahtan Implementation and experimental performance evaluation of a hybrid interrupt-handling scheme Comput. Commun. 32 1 2009 179 188
30. D.L. Schuff, Y.R. Choe, and V.S. Pai Conservative vs. optimistic parallelization of stateful network intrusion detection Proceedings of the 12th ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming 2007
31. X. Chen, Y. Wu, L. Xu, Y. Xue, and J. Li Para-Snort: a multi-thread Snort on multi-core IA platform Proceedings of Parallel and Distributed Computing and Systems PDCS 2009
32. M. Vasiliadis, S. Polychronakis, and S. Ioannidis MIDeA: a multi-parallel intrusion detection architecture Proceedings of the 18th ACM Conference on Computer and Communications Security 2011 ACM 297 308
33. M. Jamshed, J. Lee, S. Moon, I. Yun, D. Kim, S. Lee, Y. Yi, and K. Park Kargus: a highly-scalable software-based intrusion detection system Proceedings of the ACM Conference on Computer and Communications Security CCS 2012
34. J. Zhao, L. Wang, J. Tao, J. Chen, W. Sun, R. Ranjan, J. Kolodziej, A. Streit, and D. Georgakopoulos A security framework in G-Hadoop for big data computing across distributed Cloud data centres J. Comput. Syst. Sci. 80 5 2014 994 1007
35. Y. Wang, Y. Xiang, J. Zhang, W. Zhou, and B. Xie Internet traffic clustering with side information J. Comput. Syst. Sci. 80 5 2014 1021 1036