Abdollah, M. F. and Mas’ud, M. Z. and Sahib, S. and Yaacub, A. H. and Yusof, R. and Selamat, S. R. (2011) Host Based Detection Approach using Time Based Module for Fast Attack Detection Behavior. In: 2011 First IRAST International Conference on Data Engineering and Internet Technology, 15-17 March 2011, Bali Dynasty Resort, Bali, Indonesia.
|
PDF
354.pdf - Published Version Download (199kB) |
Abstract
Abstract-Intrusion Detection System (IDS) is an important component in a network security infrastructure. IDS need to be accurate and reliable in order to detect the intrusive behaviour of a packet that travelling through the network. With the current technological advancement attack on network infrastructure has evolve to a new level and to make IDS sensitive enough to detect the new attack, the detection framework need to be frequently updated. Both the fast attack and slow attack mechanism has become the subset of phases inside the anatomy of attack. Each of the attack mechanism has their own criteria and fast attack is the important type of attack that need to be considered as any late detection of the fast attack can cause a major bad impact to the organization. Therefore, there is a need to identify a suitable technique to detect the fast attack and based on this, this paper introduce a static threshold using statistical and observation technique for detecting the fast attack intrusion that is within one second time interval. The Threshold selected was based on the real network traffic dataset and verified using classification table on a real network traffic.
Item Type: | Conference or Workshop Item (Paper) |
---|---|
Subjects: | Q Science > Q Science (General) |
Divisions: | Faculty of Information and Communication Technology > Department of System and Computer Communication |
Depositing User: | Mohd Faizal Abdollah |
Date Deposited: | 24 Aug 2011 03:43 |
Last Modified: | 28 May 2015 02:16 |
URI: | http://eprints.utem.edu.my/id/eprint/122 |
Statistic Details: | View Download Statistic |
Actions (login required)
View Item |