Intelligent Detection and Response Strategies for Complex Attacks

Abstract

The current intrusion detection systems (IDS) which attempt to identify suspicious network traffic have major limitations, including generation of significant levels of false alerts. We present intelligent strategies for reduction of false positives and infrastructure protection, which increases the detection capability of the IDSs. This involves a unique approach using adaptive responses from multiple firewall and virtual private network architectures and rule sets in a novel "network quarantine channels".