Indra: A peer-to-peer approach to network intrusion detection and prevention

  • Authors:
  • Ramaprabhu Janakiraman;Marcel Waldvogel;Qi Zhang

  • Affiliations:
  • -;-;-

  • Venue:
  • WETICE '03 Proceedings of the Twelfth International Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises
  • Year:
  • 2003

Quantified Score

Hi-index 0.00

Visualization

Abstract

While the spread of the Internet has made thenetwork ubiquitous, it has also rendered networked systemsvulnerable to malicious attacks orchestrated from anywhere.These attacks or intrusions typically start with attackersinfiltrating a network through a vulnerable host andthen launching further attacks on the local network or Intranet.Attackers rely on increasingly sophisticated techniqueslike using distributed attack sources and obfuscatingtheir network addresses. On the other hand, software thatguards against them remains rooted in traditional centralizedtechniques, presenting an easily-targeted single point offailure. Scalable, distributed network intrusion preventiontechniques are sorely needed.We propose Indra-a distributed scheme based on sharinginformation between trusted peers in a network to guardthe network as a whole against intrusion attempts. Wepresent initial ideas for running Indra over a peer-to-peer infrastructureto distribute up-to-date rumors, facts, and trustinformation in a scalable manner.