A Novel Architecture for Network Intrusion Detection and Prevention

Abstract

This paper affords an investigation, regarding experiments, which suggests that modern-day network intrusion, detection, and prevention systems (NIDPSs) have numerous shortcomings in detecting or stopping growing undesirable traffic and feature numerous threats in high-pace environments. It suggests that the NIDPS overall performance may be vulnerable withinside the face of high-pace and high-load malicious traffic in phrases of packet drops, high-quality packets without analysis, and failing to detect/save you undesirable traffic. A novel exceptional of service (QoS) structure has been designed to growth the intrusion detection and prevention overall performance. Our studies have proposed and evaluated an answer the usage of a unique QoS configuration in a multi-layer transfer to arrange packets/ traffic and parallel strategies to growth the packet processing pace. The new structure turned into examined below extraordinary traffic speeds, types, and tasks. The experimental consequences display that the structure improves the community and protection overall performance that is can cowl up to eight Gb/s with zero packets dropped. This paper additionally suggests that this number (8Gb/s) may be improved, however it relies upon at the gadget ability that is constantly limited. Keywords: Security, intrusion, prevention, Dynamic Anomaly, Network Attacks, Computer security, computer networks,