The Community for Technology Leaders
Advanced Information Networking and Applications Workshops, International Conference on (2007)
Niagara Falls, Ontario, Canada
May 21, 2007 to May 23, 2007
ISBN: 0-7695-2847-3
pp: 188-193
Tarek Abbes , ISECS, France
Adel Bouhoula , SUP'COM, Tunisia
Michael Rusinowitch , LORIA/INRIA-Lorraine, France
ABSTRACT
We propose in this paper a new intrusion detection method for supporting high speed traffic. As in firewalls and routers, we rely on packet classification to specialize the task of several Network Intrusions Detection Systems (NIDSs). We build several traffic classes regarding the network configuration and the traffic properties. Then we consider the NIDS characteristics to select for each class the suitable intrusion detection method. Our idea offers several advantages such as load balancing, fault tolerance and attack prevention. <p>We express our traffic classification method by means of traffic division rules. Then we adequately construct the paths of these rules to reduce the overlapping cases. We transform the rule paths in a prefix trie that we complete by failure links to finally get a Directed Acyclic Graph (DAG). We believe that our classification method is useful for other problems such as firewalling, routing and billing.</p>
INDEX TERMS
null
CITATION
Tarek Abbes, Adel Bouhoula, Michael Rusinowitch, "A Traffic Classification Algorithm for Intrusion Detection", Advanced Information Networking and Applications Workshops, International Conference on, vol. 01, no. , pp. 188-193, 2007, doi:10.1109/AINAW.2007.62
94 ms
(Ver 3.3 (11022016))