Hybrid Intrusion Detection System Using Anomalous Internet Episodes Rules With Weighted Signature Generation

  Pawar Bhakti,  Prof. Kalvadekar P N

To provide security to network I use existing Intrusion Detection System(IDS) for identification of known attack with low false alarm,but it is not working when unknown attacks occurs so to identify unknown attacks I use Anomaly based IDS(ADS) with high false alarm. HIDS is the combination of IDS and ADS with their advantages for identification of known as well as unknown attack.IDS used signature based model to identify known attack and ADS used anomaly based model for identification of unknown attack. HIDS used internet episode rules for identify unknown attacks. Here the packets are send from client to server, then all attributes are extracted for each packet in a network. Then I am comparing attributes of each packet with kdd dataset. If the attributes match then Known attack found. After that for anomaly detection as it behavior based I am generating some normal profile and generating their rules. If the incoming packet sequence rules do not match with normal profile then we can say anomaly is detected. Finally the signature gets created for that anomaly so that if same type of attack will come then it directely identified by signature model so efficiency gets increases Here efficiency gets increases when I create more numbers of signature.

Keywords- Intrusion Detection System, anomaly detection, signature generation, internet episodes, Traffic data mining ,Network security, false alarm

Unique Identification Number - IJEDR1503028
Page Number(s) -
Pubished in - Volume 3 | Issue 3 | July 2015
DOI (Digital Object Identifier) -   
Publisher - IJEDR (ISSN - 2321-9939)

  Pawar Bhakti,  Prof. Kalvadekar P N,   "Hybrid Intrusion Detection System Using Anomalous Internet Episodes Rules With Weighted Signature Generation", International Journal of Engineering Development and Research (IJEDR), ISSN:2321-9939, Volume.3, Issue 3, pp., July 2015, Available at :http://www.ijedr.org/papers/IJEDR1503028.pdf