Performance Evaluation of Network Intrusion Detection System for Detecting Zero-Day Attacks: SNORT-XSS Algorithm

نویسندگان

چکیده

The main objective of Intrusion Detection and Prevention Systems is to provide a method detecting preventing malicious behaviors in network system minimize the harm caused by attackers. In this article, survey techniques applied for identification classification attacks based on KDD Cup’99 DARPA data set discussed, from open issues new proficient called SNORT-XSS algorithm anticipated implemented that can recognize classify real time intrusions including zero day attacks. For research, SNORT source tool developed CISCO was used describe rules existing collected dataset. Fuzzy Reasoning organize into fuzzy sets reduces true negative false positive rate. advantage Feed Forward Neural Network with Back Propagation Errors Artificial Neuron Networks considered training, validating testing proposed system. experimental results achieved preprocessing anomalous detection rate zero-day or novel were very promising beyond expectations. precision values model 98.93% 98.89% respectively, Probe DoS greater than 98%. almost negligible. It noticed best categorization acquired at epoch numbers 50 55 mean squared error 0.004.

برای دانلود رایگان متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Building intrusion pattern miner for Snort network intrusion detection system

In this paper, we enhance the functionalities of Snort network-based intrusion detection system to automatically generate patterns of misuse from attack data, and the ability of detecting sequential intrusion behaviors. To that, we implement an intrusion pattern discovery module which applies data mining technique to extract single intrusion patterns and sequential intrusion patterns from a col...

متن کامل

Evaluation of an Intrusion Detection System for Routing Attacks in Wireless Self-organised Networks

Wireless Sensor Networks (WSNs) arebecoming increasingly popular, and very useful in militaryapplications and environmental monitoring. However,security is a major challenge for WSNs because they areusually setup in unprotected environments. Our goal in thisstudy is to simulate an Intrusion Detection System (IDS)that monitors the WSN and report intrusions accurately andeffectively. We have thus...

متن کامل

Distributed Snort Network Intrusion Detection System with Load Balancing Approach

As we enjoy the conveniences that the Internet or computer networks have brought to us, the problems are getting larger, especially network security problems. A Network Intrusion Detection System (NIDS) is one of the critical components in a network nowadays. It can monitor and analyze activities of network users, and then uses knowledge of attack patterns to identify and prevent such attacks. ...

متن کامل

Improving Intrusion Detection System Based on Snort Rules for Network Probe Attacks Detection with Association Rules Technique of Data Mining

The intrusion detection system (IDS) is an important network security tool for securing computer and network systems. It is able to detect and monitor network traffic data. Snort IDS is an open-source network security tool. It can search and match rules with network traffic data in order to detect attacks, and generate an alert. However, the Snort IDS can detect only known attacks. Therefore, w...

متن کامل

Improvement and parallelization of Snort network intrusion detection mechanism using graphics processing unit

Nowadays, Network Intrusion Detection Systems (NIDS) are widely used to provide full security on computer networks. IDS are categorized into two primary types, including signature-based systems and anomaly-based systems. The former is more commonly used than the latter due to its lower error rate. The core of a signature-based IDS is the pattern matching. This process is inherently a computatio...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

ژورنال

عنوان ژورنال: Review of computer engineering research

سال: 2022

ISSN: ['2410-9142', '2412-4281']

DOI: https://doi.org/10.18488/76.v9i2.3082