Kontakt
Jak kupować
Dostawa
Doradca ds. zakupów
Honeypot Based Intrusion Detection System
A framework for mitigating network attacks using honeypot and real time rule accession in Intrusion Detection System
Angielski
121 b
Nawet do 30 dni na zwrot
Klienci kupili także
/
Miękka
212.35
zł
/
Miękka
67.35
zł
/
Miękka
62.53
zł
/
CD Audio
175.28
zł
/
Miękka
185.55
zł
The Intrusion Detection Systems (IDS) play an important role in protecting the organizations from unauthorized activities. In this dissertation work, a framework using honeypot is proposed with Real Time Rule Accession (ReTRA) capability. Honeypot is used to prevent the attack and collect attack traffic on the network. Furthermore, Apriori algorithm for association rule mining is used on the data logged by honeypot to generate rules which is added to the Snort IDS dynamically. This is different from the previous method of off-line rule base addition. The proposed IDS is efficient in detecting the attacks at the time of their occurrences even if the system was not equipped with rules to detect it. The logs generated by honeypots can grow very large in size when there is heavy attack traffic in the system, thus consuming a lot of disk space. The huge log size poses difficulty when they are processed and analyzed as they consume a lot of time and resources. The proposed system addresses these issues. The logging module for efficient capture of attack traffic saves disk space. The log analyzer processes this log to generate reports and graphs for the security administrators.
Informacje o książce
Angielski
Podaruj tę książkę jeszcze dziś
To łatwe
1 Dodaj książkę do koszyka i wybierz „dostarczyć jako prezent” 2 W odpowiedzi wyślemy Ci bon 3 Książka dotrze na adres obdarowanegoMogłoby Cię także zainteresować
Cześć! Jestem Libroamiko, Twój doradca książkowy.
Jak mogę Ci pomóc?