DocumentCode :
2649437
Title :
Enhanced automated intrusion prevention in network security
Author :
He, Xiao Dong ; Ling, Teck Chaw
Author_Institution :
Dept. of Data Commun. & Eng., Guangzhou Civil Aviation Coll., Guangzhou, China
Volume :
2
fYear :
2010
fDate :
16-18 April 2010
Abstract :
An automated Intrusion Prevention Mechanism (AIPM) which comprises the functionalities of IDS, IPS, and auto configuring network devices is proposed to enhance network security. AIPM is a mechanism that includes automated intrusion prevention function and automated analysis of intrusion messages function. In addition, the ability of automatically detecting and analyzing network traffic allows AIPM to detect malicious attacks in almost real time. Likewise, the ability of automatically analyzing intrusion messages and network configuration enable AIPM to build a topological view and locate the source of a malicious attack. Results from the case studies show that AIPM imposes lower overhead than conventional method, which queries all pre-defined routers to block every interface irrespective of where the attack is launched. In summary, AIPM which incorporates the functionalities of IDS/IPS offers network protection against potential malicious acts without incurring additional overheads as compare to the conventional method.
Keywords :
computer network security; telecommunication network routing; telecommunication traffic; IDS functionality; IPS functionality; auto configuring network devices; automated intrusion prevention mechanism; enhanced automated intrusion prevention; intrusion message function automated analysis; network protection; network security; network traffic detection; predefined routers; Fuzzy logic; Hip; Information security; Intelligent networks; Intrusion detection; Network address translation; Pattern matching; Protection; Switches; Telecommunication traffic; IDS; IPS; Intrusion; Network; Security;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Computer Engineering and Technology (ICCET), 2010 2nd International Conference on
Conference_Location :
Chengdu
Print_ISBN :
978-1-4244-6347-3
Type :
conf
DOI :
10.1109/ICCET.2010.5485436
Filename :
5485436
Link To Document :
بازگشت