By Topic

Intelligent Autonomic Strategy to Attacks in Network Infrastructure Protection: Feedback Methods to IDS, Using Policies, Alert Filters and Firewall Packet Filters for Multiple Protocols

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$31 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

1 Author(s)
Hooper, E. ; Inf. Security Group, London Univ., Egham

The intrusion detection systems (IDSs) currently in use are designed to monitor potential attacks in networks by triggering alerts. However these alerts consist of high volumes of false positives, triggered by suspicious but normal, benign connections. In this paper we discuss false positives and their impact on intrusion detection and response. Then we propose a novel approach for an efficient intelligent detection and response using "network quarantine channels" (NQCs). The NQC is defined as subnet zones that respond to packets as they are diverted to its hosts for analysis before being permitted into the internal network. The innovative approach includes feedback mechanisms involving adaptive rules, alert filters and policies of the IDS network sensors for various protocols. The effect is the enhancement of the capability of the IDS to detect threats and benign attacks

Published in:

Dependable, Autonomic and Secure Computing, 2nd IEEE International Symposium on

Date of Conference:

Sept. 29 2006-Oct. 1 2006