Abstract
A prototype of three-layer network intrusion detection system (NIDS) was designed to improve the veracity and efficiency of intrusion detection. The NIDS deals with the network layer raw data, the application layer connection session and user network behaviors. The NIDS monitors payload of packets on network layer and analyzes attacks on application layer through packets reassembly and statistical process. The system created profile using Learning Vector Quantization (LVQ) and utilized the original LVQ algorithm to implement behavior classification. This approach exhibits the ability to detect the known and unknown network attacks. Experimental results show that the NIDS detect low-level network attacks effectively with low false positive rate and perform very well for detection of unknown attacks, especially for PROBE, DOS and U2R attacks.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.