A WS-based infrastructure for integrating intrusion detection systems in large-scale environments
ODBASE'06/OTM'06 Proceedings of the 2006 Confederated international conference on On the Move to Meaningful Internet Systems: CoopIS, DOA, GADA, and ODBASE - Volume Part I
APWeb'12 Proceedings of the 14th international conference on Web Technologies and Applications
Improving energy efficiency in distributed intrusion detection systems
Journal of High Speed Networks
| Hi-index | 0.00 |
Intrusion Detection Systems (IDSs) are usually deployed within the confines of an organization. There is usually no exchang of information between an IDS in one organization with those in other organizations. The effectiveness of IDSs at detecting present-day sophisticated attacks would increase significantly if there are inter-organizational communication and sharing of information among IDSs. We envision a global Internet-scale defense infrastructure, which we call the Intrusion Detection Force (IDF), that would protect organizations and defend the Internet as a whole. This paper provides a blueprint of the IDF, where we discuss the requirements to deploy such an infrastructure, and describe its architecture and design in terms of its basic building blocks and major components. We also describe a few applications of the IDF architecture, and provide a small experimental prototype that we are currently extending as part of our vision to implement the full IDF infrastructure.