A network-based intrusion detection and prevention system with multi-mode counteractions

Yousufi, Raz Mohammad; Lalwani, Punit; Potdar, M. B.

doi:10.1109/iciiecs.2017.8276023

Cited by 12 publications

(2 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Trawczynski et al [78] provided an approach to detect a DoS-type attack based on the failure of a single node communication interface. Intrusion Detection and Prevention Systems (IDPS) with multi-mode counteractions is also one of the suggested security solutions [79]. The counteraction technique is to block the attacker's IP address via a firewall, based on the number of packets exceeding the threshold limit in one second.…”

Section: B Security Countermeasures Of Essmentioning

confidence: 99%

Analytical Review of Cybersecurity for Embedded Systems

Aloseel

Shaw

et al. 2021

IEEE Access

View full text Add to dashboard Cite

To identify the key factors and create the landscape of cybersecurity for embedded systems (CSES), an analytical review of the existing research on CSES has been conducted. The common properties of embedded systems, such as mobility, small size, low cost, independence, and limited power consumption when compared to traditional computer systems, have caused many challenges in CSES. The conflict between cybersecurity requirements and the computing capabilities of embedded systems makes it critical to implement sophisticated security countermeasures against cyber-attacks in an embedded system with limited resources, without draining those resources. In this study, twelve factors influencing CSES have been identified: ( 1) the components; (2) the characteristics; (3) the implementation; (4) the technical domain; (5) the security requirements; (6) the security problems; (7) the connectivity protocols; (8) the attack surfaces; (9) the impact of the cyber-attacks; (10) the security challenges of the ESs; (11) the security solutions; and(12) the players (manufacturers, legislators, operators, and users). A Multiple Layers Feedback Framework of Embedded System Cybersecurity (MuLFESC) with nine layers of protection is proposed, with new metrics of risk assessment. This will enable cybersecurity practitioners to conduct an assessment of their systems with regard to twelve identified cybersecurity aspects. In MuLFESC, the feedback from the systemcomponents layer to the system-operations layer could help implement "Security by Design" in the design stage at the bottom layer. The study provides a clear landscape of CSES and, therefore, could help to find better comprehensive solutions for CSES.INDEX TERMS Characteristics of embedded system, countermeasures, embedded system, cybersecurity of embedded system, MuLFESC, risk assessment.

show abstract

Section: B Security Countermeasures Of Essmentioning

confidence: 99%

Analytical Review of Cybersecurity for Embedded Systems

Aloseel

Shaw

et al. 2021

IEEE Access

View full text Add to dashboard Cite

show abstract

“…We will have a brief review of each of them in the following including anomaly-based and signature-based detection methods. No matter which IDS tools and techniques are used, they should always consider both the security and performance; means that applying a high level of security should not degrade the performance [16] .…”

Section: Idps Systemsmentioning

confidence: 99%

Analysis of intrusion detection and prevention systems

Rasooli¹,

Musawi²

2020

Int. J. Adv. Acad. Stud.

View full text Add to dashboard Cite

Recently, the security of an individual computer to large networks as a result of a dramatic growth of new devices connecting to the internet, has become one of the biggest challenges. Along with growing new types of security attacks, many protection mechanisms have taken to improve the privacy and security of sensitive information. Detection of abnormal behavior can help network administrators to identify intrusions but cannot prevent them from breaking into home network. Furthermore, using traditional methods which firewall and IDPS systems reside in different machines that results to low performance by filtering and checking traffic in multi points. This paper is providing an efficient and cost effective method of both detecting and preventing network threats. To achieve such goal, we are using a form Snort, Suricata, and Bro IDPS Systems.

show abstract