Universiti Teknologi Malaysia Institutional Repository

The prevention threat of behavior-based signature using pitcher flow architecture

Stiawan, Deris and Abdullah, Abdul Hanan and Idris, Mohd. Yazid (2010) The prevention threat of behavior-based signature using pitcher flow architecture. International Journal of Computer Science and Network Security, 10 (4). pp. 289-294. ISSN 1738-7906

[img] HTML - Published Version
360kB

Abstract

In recent years, Intrusion Prevention System (IPS) has been widely implemented to prevent suspicious threats. Unlike the traditional Intrusion Detection System, IPS has additional features to secure the computer network system. IPS is an access control device with a prevention function, which enforces a network security policy, is a helpful device that allows for more granular blocking action. In this paper, we propose a new prediction and prevention method with behavior-based detection, this method is called pitcher flow. We describes the habitual activity of the performance an overall network with a new algorithm for identifying and recognizing the normal behavior of user activities in the internal network. First, we define behavior activity by duration of activity conducted and active connection. Second, we categorize packets into class/type, identifying parameters by classifying the packets. Finally, we use the pitcher flow mechanism to identify and recognize suspicious threats. This paper also describes an algorithm for the complexity of the suspicious response.

Item Type:Article
Uncontrolled Keywords:behavior-based detection, hybrid intrusion prevention, identify habitual activity
Subjects:Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:Computer Science and Information System (Formerly known)
ID Code:39151
Deposited By:INVALID USER
Deposited On:25 Jun 2014 12:08
Last Modified:15 Feb 2017 09:59

Repository Staff Only: item control page