Collaboration between Security Devices toward improving Network Defense

Abstract

Internet technologies have been applied to many areas such as tax payments, electronic auctions, electronic commerce, electronic voting; so it is very important to protect these applications and network devices from data tapped or counterfeited by malicious attackers. To guard against these malicious attacks, different network security devices are designed, such as firewalls, intrusion detection and prevention systems, vulnerability scanner, honeypot and so on. However, all these security devices can not guarantee computer systems protection because each one is implemented as a stand-alone system for solving a particular security problem and it is not designed to communicate with the others. The focus of this work is encompassing a security infrastructure where multiple security devices form a global security layer. Each component is defined with respect to the others and interacts dynamically and automatically with the different security devices.