Communication Models and Performance Evaluation for the Delivery of Data and Policy in a Hybrid-Type Intrusion Detection System 


Vol. 10,  No. 6, pp. 727-738, Oct.  2003
10.3745/KIPSTC.2003.10.6.727


PDF
  Abstract

Much research efforts are being exerted for the study of intrusion detection system(IDS). However little work has been done for the communication models and performance evaluation of the IDS. Here we present a communication framework for doing hybrid intrusion detection in which agents are used for local intrusion detections with a centralized data analysis components for a global intrusion detection at multiple domains environment. We also assume the combination of host-based and network-based intrusion detection systems in the overall framework. From the local domain, a set of information such as alert, and/or log data are reported to the upper level. At the root of the hierarchy, there is a global manager where data coalescing is performed. The global manager delivers a security policy to its lower levels as the result of aggregation and correlation of intrusion detection alerts. In this paper, we model the communication mechanisms for the hybrid IDS and develop a simulator using OPNET modeller for the performance evaluation of transmission capabilities for the delivery of data and policy. We present and compare simulation results based on several scenarios focusing on communication delay.

  Statistics
  Cite this article

[IEEE Style]

J. J. Sug, J. Y. Hui, J. J. Su, S. S. Won, "Communication Models and Performance Evaluation for the Delivery of Data and Policy in a Hybrid-Type Intrusion Detection System," The KIPS Transactions:PartC, vol. 10, no. 6, pp. 727-738, 2003. DOI: 10.3745/KIPSTC.2003.10.6.727.

[ACM Style]

Jang Jeong Sug, Jeon Yong Hui, Jang Jong Su, and Son Seung Won. 2003. Communication Models and Performance Evaluation for the Delivery of Data and Policy in a Hybrid-Type Intrusion Detection System. The KIPS Transactions:PartC, 10, 6, (2003), 727-738. DOI: 10.3745/KIPSTC.2003.10.6.727.

Forms

Search
(IN TITLE, AUTHOR, ABSTRACT,KEYWORDS)

Advanced Search ▼

POPULAR KEYWORDS
(TOP 10 KEYWORDS)

Recent Publications
(LAST 3 YEARS)

Old Journals

Indexing

All publications of TKIPS is indexed in DOI, EBSCO, Google Scholar, Crossref, and CrossCheck.

TKIPS is also selected as the Journal for Accreditation by NRF (National Research Foundation of Korea).

Related Journals