Wild-Inspired Intrusion Detection System Framework for High Speed Networks (f|p) IDS Framework

Abstract

While the rise of the Internet and the high speed networks made information easier to acquire, faster to exchange and more flexible to share, it also made the cybernetic attacks and crimes easier to perform, more accurate to hit the target victim and more flexible to conceal the crime evidences. Although people are in an unsafe digital environment, they often feel safe. Being aware of this fact and this fiction, the authors draw in this paper a security framework aiming to build real-time security solutions in the very narrow context of high speed networks. This framework is called (f|p) since it is inspired by the elefant self-defense behavior which yields p (22 security tasks for 7 security targets).

A realistic graph‐based alert correlation system

“…Many works have been done in order to define a common distributed intrusion detection system (DIDS) framework [1][2][3]. The architecture model of the state-of-the-art DIDSs shares almost the same global architecture.…”

“…The architecture model of the state-of-the-art DIDSs shares almost the same global architecture. Figure 1 shows an example of such an architecture called (φ|π) [2]. The architecture encompasses a set of sensor elements that monitor the target system.…”

Multivariate correlation analysis and geometric linear similarity for real‐time intrusion detection systems

“…As the speed of network links and the number of flows are increasing, keeping per‐flow state is too costly in terms of processing time and storage. High‐speed networks pose serious challenges to the resource‐constrained NIDSs . Nowadays, the network speed has increased to 40 Gbps , and the demand for real‐time NIDSs, which are capable of dealing with the continuous increase of the network speed, becomes a necessity.…”