Policy of packet dropping for enhancing IDS performance 


Vol. 9,  No. 4, pp. 473-480, Aug.  2002
10.3745/KIPSTC.2002.9.4.473


PDF
  Abstract

Although many researches on IDS (Intrusion Detection System) have been performed, the most of them are limited to the algorithm of detection software. However, even an IDS with superior algorithm can not detect intrusion, if it loses packets which may have a clue of intrusions. In this paper, we suggest an efficient way to improve the performance of IDS by reducing packet losses occurred due to hardware limitation and abundant processing overhead introduced by massive detection software itself. The reduction in packet losses is achieved by dropping hacking-free packets. The result shows that this decrease of packet losses leads an IDS to improve the detection rate of real attack.

  Statistics


  Cite this article

[IEEE Style]

J. W. Moon, J. S. Kim, G. H. Jung, K. B. Yim, M. K. Joo, K. H. Choi, "Policy of packet dropping for enhancing IDS performance," The KIPS Transactions:PartC, vol. 9, no. 4, pp. 473-480, 2002. DOI: 10.3745/KIPSTC.2002.9.4.473.

[ACM Style]

Jong Wook Moon, Jong Su Kim, Gi Hyun Jung, Kang Bin Yim, Min Kyu Joo, and Kyung Hee Choi. 2002. Policy of packet dropping for enhancing IDS performance. The KIPS Transactions:PartC, 9, 4, (2002), 473-480. DOI: 10.3745/KIPSTC.2002.9.4.473.