A Performance-Based Grid Intrusion Detection System

  • Authors:
  • Fang-Yie Leu;Jia-Chun Lin;Ming-Chang Li;Chao-Tung Yang

  • Affiliations:
  • Tunghai University;Tunghai University;Tunghai University;Tunghai University

  • Venue:
  • COMPSAC '05 Proceedings of the 29th Annual International Computer Software and Applications Conference - Volume 01
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Distributed Denial-of-Service (DDoS) and Denial-of-Service (DoS) are the most dreadful network threats in recent years. In this paper, we propose a Grid-based IDS, called Performance-based Grid Intrusion Detection System (PGIDS), which exploits Gridýs abundant computing resources to detect enormous intrusion packets and improve the drawbacks of traditional IDSs which suffer from losing their detection effectiveness and capability when processing massive network traffic. For balancing detection load and accelerating the performance of allocating detection node (DN), we use Exponential Average to predict network traffic and then assign the collected actual traffic to the most suitable DN. In addition, Score Subtraction Algorithm (SSA) and Score Addition Algorithm (SAA) are deployed to update and reflect the current performance of a DN. PGIDS detects not only DoS/DDoS attacks but also logical attacks. Experimental results show that PGIDS is truly an outstanding system in detecting attacks.