VGU RESEARCH REPOSITORY
Please use this identifier to cite or link to this item:
https://epub.vgu.edu.vn/handle/dlibvgu/267
Title: | A consensus based network intrusion detection system | Authors: | Michel Toulouse M. B. Quang P. Curtis |
Keywords: | Consensus;Network Intrusion | Issue Date: | 2015 | Conference name: | The 5th International Conference on IT Convergence and Security (ICITCS2015) | Abstract: | Network intrusion detection is the process of identifying malicious behaviors that target a network and its resources. Current systems implementing intrusion detection processes observe traffic at several data collecting points in the network but analysis is often centralized or partly centralized. These systems are not scalable and suffer from the single point of failure, i.e. attackers only need to target the central node to compromise the whole system. This paper proposes an anomaly-based fully distributed network intrusion detection system where analysis is run at each data collecting point using a naive Bayes classifier. Probability values computed by each classifier are shared among nodes using an iterative average consensus protocol. The final analysis is performed redundantly and in parallel at the level of each data collecting point, thus avoiding the single point of failure issue. We run simulations focusing on DDoS attacks with several network configurations, comparing the accuracy of our fully distributed system with a hierarchical one. We also analyze communication costs and convergence speed during consensus phases. |
Duration: | 24-27/8/2015 | Conference venue: | Kuala Lumpur, Malaysia | URI(1): | http://epub.vgu.edu.vn/handle/dlibvgu/267 |
Appears in Collections: | Conference papers |
Show full item record
Items are protected by © Copyright of Vietnamese - German University Library