检索结果-内蒙古大学图书馆

High Precision Time Synchronization Scheme for distributed intrusion detection system

High Precision Time Synchronization Scheme for Distributed I...

The 2010 International Conference on Computer Application and system Modeling(2010计算机应用与系统建模国际会议 ICCASM 2010)

作者： Jian Sun Huihui Ma Du Xu Research Center for Optical Network & Mobile Information Network (COIMIN) School of Communication and Information Engineering (SCIE) University of Electronic Science and Technology of China (UESTC) Chengdu 611731 China

ISBN: (纸本)9781424472352

Time synchronization is an important middleware service of distributed systems, amongst which distributed intrusion detection system (DIDS) makes extensive use of time synchronization in particularl. Time synchronization has become a critical area of research today. Network Time Protocol (NTP) and Precision Time Protocol (PTP) are the current widely accepted standards for synchronizing clock over. This paper makes a comparison on the merits and the shortcomings of the two protocols and then provides a scheme of time synchronization based on NTP. This scheme uses a new approach to get local clock, which improves the accuracy of local clock. The results of experiments approve the scheme is feasible and improves the synchronization precision.

关键词： distributed intrusion detection system time synchronization NTP timestamp

来源：评论

学校读者我要写书评

暂无评论

About distributed intrusion detection system's Research

About Distributed Intrusion Detection System's Research

引用

2010 International Symposium on Computer,Communication, Control and Automation

作者： Weijian Huang School of Information Science and Electrical Engineering Hebei University of Engineering Handan, China Yan An School of Information Science and Electrical Engineering Hebei University of Engineering Handan, China Guanjun Li Handan Information Office Handan, China Fei Wang School of Economy and Management Hebei University of Engineering Handan, China

With the risk factor of network security continuously improving, firewalls, which once as a means of the most important safety precautions, can no longer satisfy people's demand for network security. As a complement of the firewall, distributed intrusion detection system can effectively improve the security. This article describes the framework, the structure, the Working principle, the functional structure and the development status quo, the development trend and the algorithm design of distributed intrusion detection system, analyzes the data collection module operation of distributed intrusion detection system. As distributed intrusion detection system can prevent internal attacks, external attacks and disoperation, it plays a crucial role in the network security protection.

关键词： distributed intrusion detection system network security data collection agent analysis engine response Subsystem

来源：评论

学校读者我要写书评

暂无评论

Performance Study of distributed Multi-Agent intrusion detection system

引用

Computer Aided Drafting,Design and Manufacturing 2005年第2期15卷 38-43页

作者： YIN Yong ZHOU Zu-de LIU Quan LI Fang-min LI Zhong-nan School of Information Engineering Wuhan University of Technology Wuhan 430070 China

Traditional intrusion detection system （IDS） based on hosts or networks no longer meets the security requirements in today＇s network environment due to the increasing complexity and distributivity. A multi-agent distributed IDS model, enhanced with a method of computing its statistical values of performance is presented. This model can accomplish not only distributed information collection, but also distributed intrusion detection and real-time reaction. Owing to prompt reaction and openness, it can detect intrusion behavior of both known and unknown sources. According to preliminary tests, the accuracy ratio of intrusion detection is higher than 92% on the average.

关键词： distributed intrusion detection system multi-agent intrusion detectionmethod information security

来源：评论

学校读者我要写书评

暂无评论

GonoGo - Assessing the Confidence Level of Distribute intrusion detection systems Alarms Based on BGP

引用

IEEE TRANSACTIONS ON NETWORK AND SERVICE MANAGEMENT 2025年第1期22卷 209-219页

作者： Silva, Renato S. de Moraes, Luis M. Felipe Univ Fed Rio de Janeiro BR-21941901 Rio de Janeiro Brazil

Although Border Gateway Protocol - BGP is increasingly becoming a multi-purpose protocol, it suffers from security issues regarding bogus announcements for malicious goals. Some of these security breaches are particularly critical for distributed intrusion detection systems that use BGP as their underlay network for interchanging alarms. In this case, assessing the confidence level of these BGP messages helps to prevent internal attacks. Most of the proposals addressing the confidence level of BGP messages rely on complex and time-consuming mechanisms that can also be a potential target for intelligent attacks. In this paper, we propose Gonogo as an out-of-band system based on machine learning to infer the confidence level of the intrusion alarms using just the mandatory header of each BGP message that transports them. Tests using a synthetic data set reflecting the indirect effects of a widespread worm attack over the BGP network show promising results, considering well-known performance metrics, such as recall, accuracy, receiver operating characteristics (ROC), and f1-score.

关键词： Border Gateway Protocol Internet Routing Security intrusion detection Machine learning Data models Routing protocols IP networks Grippers DIDS machine learning BGP distributed intrusion detection system

来源：评论

学校读者我要写书评

暂无评论

Scheduling framework for distributed intrusion detection systems over heterogeneous network architectures

引用

JOURNAL OF NETWORK AND COMPUTER APPLICATIONS 2018年第Apr.期108卷 76-86页

作者： Francisco Colom, Jose Gil, David Mora, Higinio Volckaert, Bruno Manuel Jimeno, Antonio Univ Alicante Dept Comp Sci Technol & Computat Alicante Spain Univ Ghent Dept Informat Technol Technol Pk Zwijnaarde 15 B-9052 Ghent Belgium

The evolving trends of mobility, cloud computing and collaboration have blurred the perimeter separating corporate networks from the wider world. These new tools and business models enhance productivity and present new opportunities for competitive advantage although they also introduce new risks. Currently, security is one of the most limiting issues for technological development in fields such as Internet of Things or Cyber-physical systems. This work contributes to the cyber security research field with a design that can incorporate advanced scheduling algorithms and predictive models in a parallel and distributed way, in order to improve intrusion detection in the current scenario, where increased demand for global and wireless interconnection has weakened approaches based on protection tasks running only on specific perimeter security devices. The aim of this paper is to provide a framework to properly distribute intrusion detection system (IDS) tasks, considering security requirements and variable availability of computing resources. To accomplish this, we propose a novel approach, which promotes the integration of personal and enterprise computing resources with externally supplied cloud services, in order to handle the security requirements. For example, in a business environment, there is a set information resources that need to be specially protected, including data handled and transmitted by small mobile devices. These devices can execute part of the IDS tasks necessary for self-protection, but other tasks could be derived to other more powerful systems. This integration must be achieved in a dynamic way: cloud resources are used only when necessary, minimizing utility computing costs and security problems posed by cloud, but preserving local resources when those are required for business processes or user experience. In addition to satisfying the main objective, the strengths and benefits of the proposed framework can be explored in future research. This

关键词： Cyber security distributed intrusion detection system Cloud computing Internet of things

来源：评论

学校读者我要写书评

暂无评论

Inferring the confidence level of BGP-based distributed intrusion detection systems alarms

引用

ANNALS OF TELECOMMUNICATIONS 2024年第11-12期79卷 901-912页

作者： Silva, Renato S. de Assis, Felipe M. F. Macedo, Evandro L. C. de Moraes, Luis Felipe M. Univ Fed Rio De Janeiro High Speed Networks Lab PESC COPPE Ave Horacio Macedo2030 Cidade Univ BR-21941914 Rio De Janeiro RJ Brazil

Border Gateway Protocol (BGP) is increasingly becoming a multipurpose protocol. However, it keeps suffering from security issues such as bogus announcements for malicious goals. Some of these security breaches are especially critical for distributed intrusion detection systems that use BGP as the underlay network for interchanging alarms. In this sense, assessing the confidence level of detection alarms transported via BGP messages is critical to prevent internal attacks. Most of the proposals addressing the confidence level of detection alarms rely on complex and time-consuming mechanisms that can also be a potential target for further attacks. In this paper, we propose an out-of-band system based on machine learning to infer the confidence level of BGP messages, using just the mandatory fields of the header. Tests using two different data sets, (i) from the indirect effects of a widespread worm attack and (ii) using up-to-date data from the IPTraf Project, show promising results, considering well-known performance metrics, such as recall, accuracy, receiver operating characteristics (ROC), and f1-score.

关键词： DIDS Machine learning BGP distributed intrusion detection system

来源：评论

学校读者我要写书评

暂无评论

Real-Time Anomaly-Based distributed intrusion detection systems for Advanced Metering Infrastructure Utilizing Stream Data Mining 5

Real-Time Anomaly-Based Distributed Intrusion Detection Syst...

引用

International Conference on Smart Grid and Clean Energy Technologies (ICSGCE 2015)

作者： Alseiari, Fadwa Abdul Aziz Aung, Zeyar Masdar Inst Sci & Technol Inst Ctr Smart & Sustainable Syst iSmart Abu Dhabi U Arab Emirates

ISBN: (纸本)9781467387347

The advanced Metering Infrastructure (AMI) is one of the core components of smart grids' architecture. As AMI components are connected through mesh networks in a distributed mechanism, new vulnerabilities will be exploited by grid's attackers who intentionally interfere with network's communication system and steal customer data. As a result, identifying distributed security solutions to maintain the confidentiality, integrity, and availability of AMI devices' traffic is an essential requirement that needs to be taken into account. This paper proposes a real-time distributed intrusion detection system (DIDS) for the AMI infrastructure that utilizes stream data mmmg techniques and a multi-layer implementation approach. Using unsupervised online clustering techniques, the anomaly-based DIDS monitors the data flow in the AMI and distinguish if there are anomalous traffics. By comparing between online and offline clustering techniques, the experimental results showed that online clustering "Mini-Batch K-means" were successfully able to suit the architecture requirements by giving high detection rate and low false positive rates.

关键词： distributed intrusion detection system online clustering mini-batch k-means smart grids stream mining advanced metering infrastructure

来源：评论

学校读者我要写书评

暂无评论

Weighted link graphs: A distributed IDS for secondary intrusion detection and defense

Weighted link graphs: A distributed IDS for secondary intrus...

引用

Conference on Data Mining, intrusion detection, Information Assurance and Data Networks Security 2005

作者： Zhou, M Lang, SD Univ Cent Florida Dept Comp Sci Orlando FL 32816 USA

ISBN: (纸本)0819457973

While a firewall installed at the perimeter of a local network provides the first line of defense against the hackers, many intrusion incidents are the results of successful penetration of the firewalls. One computer's compromise often put the entire network at risk. In this paper, we propose an IDS that provides a finer control over the internal network. The system focuses on the variations of connection-based behavior of each single computer, and uses a weighted link graph to visualize the overall traffic abnormalities. The functionality of our system is of a distributed personal IDS system that also provides a centralized traffic analysis by graphical visualization. We use a novel weight assignment schema for the local detection within each end agent. The local abnormalities are quantitatively carried out by the node weight and link weight and further sent to the central analyzer to build the weighted link graph. Thus, we distribute the burden of traffic processing and visualization to each agent and make it more efficient for the overall intrusion detection. As the LANs are more vulnerable to inside attacks, our system is designed as a reinforcement to prevent corruption from the inside.

关键词： Data Security Local Area Networks distributed intrusion detection system fine control firewalls (computers) Traffic Analysis Security Visualization vandalism corruption Agents perimeter

来源：评论

学校读者我要写书评

暂无评论

An Improved Snort intrusion detection system Based on Self-similar Traffic Model

An Improved Snort Intrusion Detection System Based on Self-s...

引用

1st International Symposium on Computer Network and Multimedia Technology

作者： Kong Hong Zhang Jiangang Shandong Univ Sci & Technol Coll Econ & Management Qingdao Peoples R China

ISBN: (纸本)9781424452729

This paper introduces the existing distributed intrusion detection technology and points out the disadvantages of the traditional intrusion detection system. A distributed intrusion detection system based on self-similar traffic is designed and the specific implementation of all parts is presented. In the analysis system, an anomaly detection engine is added before the misuse detection engine. The authors design an anomaly detection engine based on self-similar traffic model. Then we optimize the evaluation of Hurst parameter and its value scope based-on time-domain analysis. These improvements can effectively detect unknown intrusion after filtering the normal network traffic.

关键词： distributed intrusion detection system Snort self-similar traffic

来源：评论

学校读者我要写书评

暂无评论

Design and Simulation of a Tree-Based intrusion detection system against Denial of Service

Design and Simulation of a Tree-Based Intrusion Detection Sy...

引用

International Conference on Applied Mechanics and Mechanical Engineering

作者： Bai Yuan Bai Zhong-ying Tianjin Univ Technol Tianjin 300191 Peoples R China Beijing Univ Posts & Telecommun Beijing 100876 Peoples R China

ISBN: (纸本)9780878492459

Based on analysis of relative and absolute traffic anomalies a fully DIDS(distributed intrusion detection system) is built to detect and respond flooding DoS(Denial of Service) in a specific network area, using traffic trees as data structure to store, execute, communicate and combine abnormal data. A single component settled in a network element is called Tree-Devices and all Tree-Devices construct a Tree-DIDS, a fully DIDS. Tree-Devices communicate with other devices in three ways and collaborate to detect attacks, by which communication cost is reduced. Fully architecture avoids the single point failure, while double anomalies help to warn earlier. The simulation results and performance analysis show that Tree-DIDS works effectively.

关键词： Denial of Service Traffic Trees distributed intrusion detection system Fully DIDS

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：