DocumentCode
634866
Title
Security Software Based on Windows NDIS Filter Drivers
Author
Shin-Shung Chen ; Tzong-Yih Kuo ; Yu-Wen Chen
Author_Institution
Dept. of Inf. Manage., China Univ. of Technol., Taipei, Taiwan
fYear
2013
fDate
22-26 July 2013
Firstpage
260
Lastpage
264
Abstract
We present a new security software based on the NDIS filter drivers at Windows desktop computer, which focuses on filtering and dropping packets according to the snort rules released by security communities (such as Snort or Emerging Threats). TWIDS is an application designed based on the middleware of the Windows® OS, it can identify the application process that transfer packets. TWIDS can process a large number of malicious IP address in the database that it can check and drop packets effectively and improve the network security on Windows® desktop computer by using Snort related protective resources. Thus, it provides a security solution that can help to reduce the investments for network gateway and can be used by common users who used for eliminating the botnet and malware traffic. TWIDS is shared in the downloads section of the Openfoundry.org website, and it will against the spread of botnets and malware.
Keywords
database management systems; internetworking; invasive software; microcomputers; middleware; network servers; operating systems (computers); NDIS filter drivers; Openfoundry.org Website; Snort related protective resources; Windows OS; Windows desktop computer; application process; botnet elimination; database; downloads section; dropping packets; filtering packets; malicious IP address; malware traffic elimination; middleware; network gateway; network security; security communities; security software; Bandwidth; Computers; IP networks; Information filters; Security; Software; IDS; NDIS filter driver; Snort; botnet;
fLanguage
English
Publisher
ieee
Conference_Titel
Computer Software and Applications Conference Workshops (COMPSACW), 2013 IEEE 37th Annual
Conference_Location
Japan
Type
conf
DOI
10.1109/COMPSACW.2013.36
Filename
6605799
Link To Document