loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
21st International Conference on Advanced Networking and Applications (AINA '07)
A Stateful Real Time Intrusion Detection System for high-speed network
Niagara Falls, Ontario, Canada
May 21-May 23
ISBN: 0-7695-2846-5
Meharouech Sourour, Higher School of Communication of Tunisia
Bouhoula Adel, Higher School of Communication of Tunisia
Abbes Tarek, Higher School of Communication of Tunisia
The Solutions of security are disturbed by aftermaths of the fast evolution of the infrastructure. Indeed, the new networks use more and more fast links in Gigabits and 10 Gigabits whereas the methods of security most often applied as IDSs, firewalls and cryptography are incapable to follow this fast transfer of data. In this paper, we are interested in the NIDSs. In fact the constant increase in network speed and throughput pose new challenges to these systems. Current NIDSs are designed to 10 / 100 Mbps [6], nevertheless large network installations are Gigabit Ethernet (1000 Mbps), so the task of detection becomes increasingly difficult with only one NIDS. The purpose of this paper is to discuss a new approach with the aim of accelerating the intrusion detection. The approach is based on three main steps: traffic classification, load balancing and a high availability mechanism. The paper describes all the above mentioned approaches and presents an experimental evaluation of their effectiveness.
Citation:
Meharouech Sourour, Bouhoula Adel, Abbes Tarek, "A Stateful Real Time Intrusion Detection System for high-speed network," aina, pp.404-411, 21st International Conference on Advanced Networking and Applications (AINA '07), 2007
Usage of this product signifies your acceptance of the Terms of Use.