Abstract

Tremendous efforts have been taken over many years to secure the network against attacks; still attackers are successful with painful frequency. Experienced attackers try to disable the Intrusion Detection System (IDS) before launching attack. Therefore there should be some mechanism in IDS for uninterrupted detection of intrusion even though failure in IDS has occurred due to attacks. This paper presents the design and implementation of Novel Intrusion-Tolerant Distributed Intrusion Detection System using Packet Filter Firewall and State Transition Tables. Proposed architecture is immune to both, failure of IDS components and compromised IDS components. This architecture is capable of restricting the effect of network attacks like DoS, DDoS and Probing to a subset of network. Experimental results prove the usefulness and efficiency of this architecture.

References

• Liwei Kuang, Mohammad Zulkernine, “An Intrusion-Tolerant Mechanism for Intrusion Detection Systems”, The Third International Conference on Availability, Reliability and Security, ISBN: 0-7695-3102-4, IEEE 2008
• Feng Zhao, Qing-Hua Li1, Li Jin, “An Intrusion-Tolerant Intrusion Detection Method Based On Real-Time Sequence Analysis”, Fifth International Conference on Machine Learning and Cybernetics, Dalian, ISBN: 1-4244-0060-0, IEEE 2006
• Paulo Sousa, Alysson Neves Bessani, Miguel Correia,Nuno Ferreira Neves, Paulo Verissimo, “Resilient Intrusion Tolerance through Proactive and Reactive Recovery”, 13th IEEE International Symposium on Pacific Rim Dependable Computing, ISBN: 0-7695-3054-0, IEEE 2007
• Hui Zhao, Shanhong Zheng ,Wanlong Li, LiJuan Zhang, “A Network Intrusion-Tolerant System Based on Adaptive Algorithm”, 5th International Conference on Wireless Communications, Networking and Mobile Computing ISBN: 978-1-4244-3693-4, IEEE 2009
• Xiaohong Qu, Zhijie Liu , Xiaoyao Xie, “Research on Distributed Intrusion Detection System Based on Protocol Analysis”, IEEE 2009
• Senda Hammouda, Lilia Maalej, Zouheir Trabelsi, “Towards Optimized TCP/IP Covert Channels Detection, IDS and Firewall Integration”, ISBN: 978-2-9532443-0-4, IEEE 2008
• Hamed Salehi, Hossein Shirazi, Reza Askari Moghadam, “Increasing overall network security by integrating Signature-Based NIDS with Packet Filtering Firewall”, International Joint Conference on Artificial Intelligence, ISBN: 978-0-7695-3615-6, IEEE 2009
• Zongpu Jia, Shufen Liu, Guowei Wang, “Research and Design of NIDS Based on Linux Firewall”, 1 st International Symposium on Pervasive Computing and Applications, IEEE 2006
• Duanyang Zhao, Qingxiang Xu, Zhilin Feng, “Analysis and Design for Intrusion Detection System Based on Data Mining”, Second International Workshop on Education Technology and Computer Science, ISBN: 978-0-7695-3987-4, IEEE 2010
• Mohammad Akbarpour Sekeh, Mohd. Aizaini bin Maarof, “Fuzzy Intrusion Detection System via Data Mining Technique With Sequences of System Calls”, Fifth International Conference on Information Assurance and Security, ISBN: 978-0-7695-3744-3, IEEE 2009
• Ming-Yang Su, Kai-Chi Chang, Hua-Fu Wei, and Chun-Yuen Lin, “A Real-time Network Intrusion Detection System Based on Incremental Mining Approach”, ISBN: 1-4244-2415-3, IEEE 2008
• Mrs. P. Kola Sujatha Dr. A. Kannan S. Ragunath K. Sindhu Bargavi S. Githanjali, “A Behavior Based Approach to Host-Level Intrusion Detection using Self-organizing Maps”, First International Conference on Emerging Trends in Engineering and Technology, ISBN: 978-0-7695-3267-7, IEEE 2008