Journal article 540 views
A New Architecture for Network Intrusion Detection and Prevention
Waleed Bul'ajoul 
,
Anne James,
Siraj Shaikh
,
Anne James,
Siraj Shaikh
IEEE Access, Volume: 7, Pages: 18558 - 18573
Swansea University Author:
Siraj Shaikh
Full text not available from this repository: check for access using links below.
DOI (Published version): 10.1109/access.2019.2895898
Abstract
This paper presents an investigation, involving experiments, which shows that current network intrusion, detection, and prevention systems (NIDPSs) have several shortcomings in detecting or preventing rising unwanted traffic and have several threats in high-speed environments. It shows that the NIDP...
| Published in: | IEEE Access |
|---|---|
| ISSN: | 2169-3536 |
| Published: |
Institute of Electrical and Electronics Engineers (IEEE)
2019
|
| Online Access: |
Check full text
|
| URI: | https://cronfa.swan.ac.uk/Record/cronfa61041 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| Abstract: |
This paper presents an investigation, involving experiments, which shows that current network intrusion, detection, and prevention systems (NIDPSs) have several shortcomings in detecting or preventing rising unwanted traffic and have several threats in high-speed environments. It shows that the NIDPS performance can be weak in the face of high-speed and high-load malicious traffic in terms of packet drops, outstanding packets without analysis, and failing to detect/prevent unwanted traffic. A novel quality of service (QoS) architecture has been designed to increase the intrusion detection and prevention performance. Our research has proposed and evaluated a solution using a novel QoS configuration in a multi-layer switch to organize packets/traffic and parallel techniques to increase the packet processing speed. The new architecture was tested under different traffic speeds, types, and tasks. The experimental results show that the architecture improves the network and security performance which is can cover up to 8 Gb/s with 0 packets dropped. This paper also shows that this number (8Gb/s) can be improved, but it depends on the system capacity which is always limited. |
|---|---|
| College: |
Faculty of Science and Engineering |
| Funders: |
Nottingham Trent University; University of Omar Al-Mukhtar, Al-Bayda, Libya |
| Start Page: |
18558 |
| End Page: |
18573 |