Design and implementation of multilevel DSM in NIDS

Network-based attacks have become common and sophisticated. For this reason, intrusion detection systems are now shifting their focus from the hosts and their operating systems to the network itself. Network intrusion detection is challenging because network auditing produces large amounts of data, and different events related to a single intrusion may be visible in different places in the network. This paper presents network intrusion system, describes the design of a decision support module (DSM) for intrusion detection system, which can provide active detection and automated response support during intrusions. It is designed to be a sense and response system that can monitor various activities on the network. In particular, it simultaneously monitors networked computer´s activities at different levels.