Cogprints

Threshold Verification Technique for Network Intrusion Detection System

Mohd Faizal , A. and Mohd Zaki , M. and Shahrin , S. and Robiah , Y. and Siti Rahayu , S. (2009) Threshold Verification Technique for Network Intrusion Detection System. [Journal (On-line/Unpaginated)]

Full text available as:

[img]
Preview
PDF (Computer Science and Information Security) - Published Version
Available under License Creative Commons Public Domain Dedication.

219Kb

Abstract

Internet has played a vital role in this modern world, the possibilities and opportunities offered are limitless. Despite all the hype, Internet services are liable to intrusion attack that could tamper the confidentiality and integrity of important information. An attack started with gathering the information of the attack target, this gathering of information activity can be done as either fast or slow attack. The defensive measure network administrator can take to overcome this liability is by introducing Intrusion Detection Systems (IDSs) in their network. IDS have the capabilities to analyze the network traffic and recognize incoming and on-going intrusion. Unfortunately the combination of both modules in real time network traffic slowed down the detection process. In real time network, early detection of fast attack can prevent any further attack and reduce the unauthorized access on the targeted machine. The suitable set of feature selection and the correct threshold value, add an extra advantage for IDS to detect anomalies in the network. Therefore this paper discusses a new technique for selecting static threshold value from a minimum standard features in detecting fast attack from the victim perspective. In order to increase the confidence of the threshold value the result is verified using Statistical Process Control (SPC). The implementation of this approach shows that the threshold selected is suitable for identifying the fast attack in real time.

Item Type:Journal (On-line/Unpaginated)
Keywords:fast attack detection, Intrusion detection system, Statistical Process Control, IJCSIS, Network
Subjects:Computer Science > Complexity Theory
Computer Science > Dynamical Systems
ID Code:6555
Deposited By:IJCSI, Mr IJCSIS
Deposited On:02 Jul 2009 02:50
Last Modified:11 Mar 2011 08:57

Metadata

Repository Staff Only: item control page