A novel technique for congestion avoidance/control in high speed multimedia networks using Network Intrusion Detection systems

Recent expansion of the computer networks has opened a possibility of explosive spread of computer viruses. Viral spreads that attack the end user or the nodes and hence the traffic on the network increases by self duplication and perpetuation. The net effect is, increase of senseless throughput spiraling, multiplication of load, and increased delay, leading to severe congestion and crash. Thus there is a need to monitor the network for throughput, delay and probability of error and ensure the prompt remedial measures to keep the network operating, robustly by identifying viral packets in the network, at each router and for the resident algorithm to take necessary action on such packets. In this paper, we propose a distributed approach for computer virus detection and elimination in networks. The proposed method works in two stages. In the first stage, a combination of the signature based Port scanning technique, along with a Monitoring method to prevent execution of viral instruction sequences, is used, for detection of network viruses. In the second stage, this Network Intrusion Detection system [NIDS] is installed on all the intermediate routers and end systems in a real network, and throughput and other QoS parameters are monitored. This combination has proven to be extraordinarily efficient in reducing network congestion levels and avoiding crashes.