Open Source Intrusion Detection Research Articles

Managing Intrusion Detection as a Service in Cloud Networks

Cloud computing is frequently being utilized to eliminate the need to local information resources. In this paper, we address the problem of intrusion detection in cloud environments and the possibility of allowing intrusion detection to be provided to clients as a service. The paper describes the Cloud Intrusion Detection Service (CIDS), which is intended to function as an intrusion detection web service to be provided for cloud clients in a service-based manner. CIDS utilizes the “Snort” open source intrusion detection system. The operating logic and user access webpages were developed using J2EE. We implemented a proof-of-concept prototype to evaluate the performance. CIDS was proved to be very friendly to resource allocation. Additionally, CIDS gave better attack detection rates and attack detection times than other solutions. These improvements can be beneficial to both cloud providers and cloud subscribers alike. General Terms Cloud Computing, Intrusion Detection Management

Retrofitting networked applications to add autonomic reconfiguration

To reduce user maintenance is an important goal for applications that must dynamically adapt based on their environments. There are many existing popular applications that lack support for this autonomic reconfiguration, but that are beginning to be used in these dynamic environments, in which they must update themselves frequently; not all of these applications will be completely redesigned and redeveloped in order to support autonomic features. In this paper, we explore how to retrofit pre-existing networked applications to add support for autonomic reconfiguration. To illustrate our methods, we retrofit a popular open-source intrusion detection system, Snort , to enable it to reconfigure itself using online program updates and information about its environment.

Open-Source Intrusion Detection Tools for Linux: Armed with Linux and Open Source tools, you can even keep an ISP secure.

Open-Source Intrusion Detection Tools for Linux: Armed with Linux and Open Source tools, you can even keep an ISP secure.