Abstract
Intrusion Detection System (IDS) is a security technology that attempts to identify intrusions. Snort is an open source IDS which enables us to detect the previously known intrusions. However, Snort IDS has several problems one of them is the efficiency problem. We suggest using distributed environment in order to enhance it. We achieved this goal by enhancing the Snort's string matching engine through using a LAN of computers, where each computer in the LAN matching a subset of the monitored attacks. The experimental results show that it is possible to improve Snort's efficiency using distributed environment. In addition, Snort's testability has been enhanced.
| Original language | English |
|---|---|
| Title of host publication | 5th International Conference on Computer Sciences and Convergence Information Technology |
| Publisher | IEEE |
| Pages | 1020-1023 |
| ISBN (Print) | 9788988678305, 9781424485673 |
| DOIs | |
| Publication status | Published - 10 Feb 2011 |
Keywords
- Algorithm design and analysis
- Intrusion detection system
- LAN
- Open source IDS
- Snort IDS
Fingerprint
Dive into the research topics of 'String matching enhancement for snort IDS'. Together they form a unique fingerprint.Cite this
- APA
- Author
- BIBTEX
- Harvard
- Standard
- RIS
- Vancouver