On distributed intrusion detection systems design for high speed networks

Authors:
Ouissem Ben Fredj;Hassen Sallay;Adel Ammar;Mohsen Rouached;Khaled Al-Shalfan;Majdi Ben Saad
Affiliations:
Department of Computer Science, College of Computer and Information Sciences, Al-Imam Mohamad Ibn Saud University, Saudi Arabia;Department of Computer Science, College of Computer and Information Sciences, Al-Imam Mohamad Ibn Saud University, Saudi Arabia;Department of Computer Science, College of Computer and Information Sciences, Al-Imam Mohamad Ibn Saud University, Saudi Arabia;Department of Computer Science, College of Computer and Information Sciences, Al-Imam Mohamad Ibn Saud University, Saudi Arabia;Department of Computer Science, College of Computer and Information Sciences, Al-Imam Mohamad Ibn Saud University, Saudi Arabia;Department of Computer Science, College of Computer and Information Sciences, Al-Imam Mohamad Ibn Saud University, Saudi Arabia
Venue:
ISPACT'10 Proceedings of the 9th WSEAS international conference on Advances in e-activities, information security and privacy
Year:
2010

Citing 12
Cited 1

Stateful Intrusion Detection for High-Speed Networks

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
DIDMA: A Distributed Intrusion Detection System Using Mobile Agents

SNPD-SAWN '05 Proceedings of the Sixth International Conference on Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing and First ACIS International Workshop on Self-Assembling Wireless Networks
The Architecture of the Large-scale Distributed Intrusion Detection System

PDCAT '05 Proceedings of the Sixth International Conference on Parallel and Distributed Computing Applications and Technologies
Distributed intrusion detection in clusters based on non-interference

ACSW Frontiers '06 Proceedings of the 2006 Australasian workshops on Grid computing and e-research - Volume 54
Composition of a DIDS by integrating heterogeneous IDSs on grids

Proceedings of the 4th international workshop on Middleware for grid computing
Conservative vs. optimistic parallelization of stateful network intrusion detection

Proceedings of the 12th ACM SIGPLAN symposium on Principles and practice of parallel programming
Intrusion Detection for High-Speed Networks Based on Producing System

WKDD '08 Proceedings of the First International Workshop on Knowledge Discovery and Data Mining
Gnort: High Performance Network Intrusion Detection Using Graphics Processors

RAID '08 Proceedings of the 11th international symposium on Recent Advances in Intrusion Detection
A Scheme for the Design and Implementation of a Distributed IDS

NETCOM '09 Proceedings of the 2009 First International Conference on Networks & Communications
Collaborative architecture for distributed intrusion detection system

CISDA'09 Proceedings of the Second IEEE international conference on Computational intelligence for security and defense applications
Towards the automatic generation of mobile agents for distributed intrusion detection system

Journal of Systems and Software
IDS Adaptation for an Efficient Detection in High-Speed Networks

ICIMP '10 Proceedings of the 2010 Fifth International Conference on Internet Monitoring and Protection

Wild-Inspired Intrusion Detection System Framework for High Speed Networks f|p IDS Framework

International Journal of Information Security and Privacy

Quantified Score

Hi-index	0.00

Visualization

Abstract

This article states the need of High Performance Computing (HPC) for Distributed Intrusion Detection Systems (DIDS) and discusses the design requirements of the system. Since high-speed networks are the performance key in HPC, the article studies the mapping of the different requirements over the software and hardware features of high-speed networks. The study has resulted in several recommendation for the design of IDS over HSN, starting from the communication protocol and the programming model that should be adopted, to the way the system should handle the communication flow, the memory management and the data transfer between IDS sensors.