Study of Network-based Intrusion Detection System for virtualization

Intrusion Detection System (IDS) through collecting and analyzing information from network and Host to check whether there are some signs about attack. Network-based Intrusion Detection System for Virtual Machine Environment is a novel approach to implement the traditional network-based IDS in virtual machine environment. The paper get the network packets from the virtual bridge which is a virtual device in virtual machine used to transmit packets from physical device to virtual interface. Considering of the DHCP, virtual machine´s IP address is variable, and so we use the MAC address to identify a virtual machine´s network interface. The real system test shows that VNIDS has a complete function implement about what provide an IDS which is suitable to the virtual machine environment.