Earticle

초록

영어

There major challenges for current Intrusion Detection Systems (IDS) which attempt to
identify suspicious network traffic. Due to the high percentage of alerts generated by such
systems, the level of false positives is among the significant problems. We present intelligent
strategies for reduction of false positives and infrastructure protection using a novel
approach using adaptive responses from firewall packet filters in what we call, network
quarantine channels (NQC). This involves using an efficient and intelligent intrusion
detection and response system using Virtual Private Networks, firewalls and packet filters.
The firewall packet filters provide effective intelligent responses by to granting access to the
normal packets and denying malicious traffic access to the network, after the identity of the
connections are verified through the statistical analysis in the NQC. These effective strategies
reduce false positives and increases detection capability of the IDS

목차

Abstract
 1. Introduction
 2. Network quarantine channels and Firewall Packet Filter
 3. Responses using Packet Filter Rule, NQC and IDS
 4. Experimental Details
  4.1. Method
 5. Results
 6. Discussion
 7. Related work
 8. Conclusion
 9. References

저자

• Emmanuel Hooper [ Information Security Group University of London Royal Holloway, Egham, Surrey, TW20 OEX, UK. EHSC, Camarillo, California, USA. ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605