Study of snort-based IDS

Authors:
S. Chakrabarti;M. Chakraborty;I. Mukhopadhyay
Affiliations:
Institute of Engineering & Management, Kolkata;Institute of Engineering & Management, Kolkata;Institute of Engineering & Management, Kolkata
Venue:
Proceedings of the International Conference and Workshop on Emerging Trends in Technology
Year:
2010

Citing 7
Cited 1

Internet security: firewalls and beyond

Communications of the ACM
Internet security attacks at the basic levels

ACM SIGOPS Operating Systems Review
Proactive Intrusion Detection and Distributed Denial of Service Attacks—A Case Study in Security Management

Journal of Network and Systems Management
Enemy at the gate: threats to information security

Communications of the ACM - Program compaction
Computer Networks and Internets

Computer Networks and Internets
Intrusion Prevention System Design

CIT '04 Proceedings of the The Fourth International Conference on Computer and Information Technology
Snort - Lightweight Intrusion Detection for Networks

LISA '99 Proceedings of the 13th USENIX conference on System administration

Practical real-time intrusion detection using machine learning approaches

Computer Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

General trend in industry is a shift from Intrusion Detection Systems (IDS) to Intrusion Prevention Systems (IPS). In this paper, we have investigated the motivations behind this trend. In addition, we have surveyed some of the available IDS/IPS tools. Real time analysis of several Internet attacks was done using SNORT, "the de facto standard for intrusion detection/prevention", and Nmap in order to study malicious behavior of our network. Simulation results of Scanning attack as well as DoS attack performed on test computer have been provided. A comparative analysis of the results obtained with Snort and EagleX showed the higher efficiency of Snort.