Distributed instrusion prevention in active and extensible networks

  • Authors:

  • Todd Sproull;John Lockwood

  • Affiliations:

  • Applied Research Laboratory, Department of Computer Science and Engineering, Washington University in Saint Louis, St. Louis, MO;Applied Research Laboratory, Department of Computer Science and Engineering, Washington University in Saint Louis, St. Louis, MO

  • Venue:
  • IWAN'04 Proceedings of the 6th IFIP TC6 international working conference on Active networks
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

The proliferation of computer viruses and Internet worms has had a major impact on the Internet Community. Cleanup and control of malicious software (malware) has become a key problem for network administrators. Effective techniques are now needed to protect networks against outbreaks of malware. Wire-speed firewalls have been widely deployed to limit the flow of traffic from untrusted domains. But these devices weakness resides in a limited ability to protect networks from infected machines on otherwise trusted networks. Progressive network administrators have been using an Intrusion Prevention System (IPS) to actively block the flow of malicious traffic. New types of active and extensible network systems that use both microprocessors and reconfigurable logic can perform wire-speed services in order to protect networks against computer virus and Internet worm propagation. This paper discusses a scalable system that makes use of automated worm detection and intrusion prevention to stop the spread of computer viruses and Internet worms using extensible hardware components distributed throughout a network. The contribution of this work is to present how to manage and configure large numbers of distributed and extensible IPSs.