Intrusion Detection System For Network Security Research Articles

Computer network big data detection based on internet of things technology

In order to solve the problems of traditional network security intrusion detection system in detection accuracy and missed detection rate, this paper proposes a computer network data detection based on Internet of things technology. This paper designs an intrusion detection system based on data clustering analysis algorithm. The hardware part of the intrusion detection system is composed of six parts: detection module, adaptive module, control management module, risk early warning module, control access module and data acquisition module. Each module is closely connected and updated with the rule base and database in real time; In the software flow design of the system, based on the data clustering analysis algorithm, the collected original data are classified and processed, and the Mings distance is determined, revealing the difference between normal data and abnormal data, and finally realizing the accurate detection of cloud computing network intrusion behavior. The experimental results show that the proposed intrusion detection system has a higher detection accuracy for malicious data, and the average missed detection rate can be controlled below 0.3 %. Conclusionthe detection system designed in this paper has more advantages in stability performance.

Association Rule Mining Frequent-Pattern-Based Intrusion Detection in Network

In the network security system, intrusion detection plays a significant role. The network security system detects the malicious actions in the network and also conforms the availability, integrity and confidentiality of data information resources. Intrusion identification system can easily detect the false positive alerts. If large number of false positive alerts are created then it makes intrusion detection system as difficult to differentiate the false positive alerts from genuine attacks. Many research works have been done. The issues in the existing algorithms are more memory space and need more time to execute the transactions of records. This paper proposes a novel framework of network security Intrusion Detection System (IDS) using Modified Frequent Pattern (MFP-Tree) via K-means algorithm. The accuracy rate of Modified Frequent Pattern Tree (MFPT)-K means method in finding the various attacks are Normal 94.89%, for DoS based attack 98.34%, for User to Root (U2R) attacks got 96.73%, Remote to Local (R2L) got 95.89% and Probe attack got 92.67% and is optimal when it is compared with other existing algorithms of K-Means and APRIORI.

Research on Attributes Reduction Method of Intrusion Detection Data Based on Rough Set Theory

With the huge amount of network connection data, high data dimensions and complex attack types, it is difficult for traditional data analysis techniques to obtain satisfactory results in the Network Security Intrusion Detection System. This paper proposed a RSDB method based on the Rough Set Theory and the Data Deblock Thought, which can help us to reduce the data conditional attributes and remix the data. The method considers two factors: the relationship between conditional attributes and decision attribute, and the data integrity. Through the experiment, this method can solve these difficult above problems effetely, while ensuring the original data is not distorted. Through many experiments and their experimental results, RSDB can not only make the classification accuracy over than 90%, but also its average detection time is in the millisecond level.

Campus Network Security Program Based on Snort Network Security Intrusion Detection System

This paper studies the security problems of campus network and summarizes the current on the current security risks and threats that campus network faces, focusing on analysis of attack-defense strategies on DOS network layer, proposing the security program of campus network which uses firewall as well as network security intrusion detection system snort. This paper analyzes the functional advantages of the program and presents in details the setup deployment and collocation methods of network security intrusion detection system based on snort in the campus network, and its application results are also summarized.