Effective modeling of aggregated intrusion detection system for performance enhancement

Abstract

The technique of aggregation of individual Intrusion Detection System IDS addresses the issues relating to the optimality of decision making in the environment of multiple intrusion detection system The improvements in aggregation of IDS enable us to detect not only the conventional attacks but also the new and the rare attacks This assertion is discussed in detail in this thesis It also describes the experimental work done to show the improvement in attack detection by hybrid intrusion detection system Various intrusion detection systems are initially analysed and validated to understand the need for hybrid intrusion detection system Different metrics available for evaluation of the hybrid intrusion detection system are introduced The dataset used for the experimental purpose and its usefulness is demonstrated The issues connected with individual intrusion detection system are discussed and the need for aggregation of multiple intrusion detection system is established in this thesis In addition to meaningful results aggregation of multiple IDS provides advantage with respect to completeness and reliability of a secured network environment. newline