Study and Implementation of Network based Intrusion Detection and Prevention System

Abstract

The objective of this research work is to study existing intrusion detection and prevention systems and to propose three new architectures with their learning algorithms, which can be used to detect intrusions present in the network with minimum false alarm or false positive rate and maximum detection accuracy. This work also addresses the issue of space required to store the huge dataset and the time required to process it. newlineOver the precedent decades, Internet and computer systems have raised maximum security issues as complexity in network architecture has increased. Any malicious intrusion or attack on the network may prove to be serious disasters. Intrusion is a malicious, harmful entity which is responsible for network failure. They violate integrity, confidentiality and availability of a system and other resources. In such cases, data in the system may be stolen or being lost. newlineSo, Intrusion Detection Systems (IDSs) are deployed to decrease the serious influence of these attacks on network. IDS is capable of detecting all types of attack on network like malicious, harmful attack, vulnerability, data driven attacks, host based attacks which may result into privilege violation, unauthorized access to sensitive data, unauthorized logins and malwares. Firewall were designed to stop external traffic from entering in internal network but were unable to detect attack at network layer and application layer. These attacks are worms, viruses, DOS, DDOS and Trojan. To address this problem and to improve security, IDS systems have been designed and developed. newlineIntrusion detection and prevention systems (IDPSs), aptly called the second chain of security, play a major role in offering comprehensive protection. Since it is not easy to build up a absolute solution for the avoidance of attacks, specially on multifaceted systems, attackers are at all the times trying to uncover new paths to avoid these obstacle mechanisms. Hence IDSs have turn out to be an unavoidable part of security systems. IDSs appear into the representa