Stiawan, Deris and Idris, Mohd. Yazid and Abdullah, Abdullah Hanan (2010) The Prevention Threat of Behavior-based Signature using Pitcher Flow Architecture. IJCSNS International Journal of Computer Science and Network Security, 10 (4). pp. 289-294.
Preview |
Text
Journal_IJCSNS_edit_utm.pdf Download (277kB) | Preview |
Abstract
In recent years, Intrusion Prevention System (IPS) has been widely implemented to prevent suspicious threats. Unlike the traditional Intrusion Detection System, IPS has additional features to secure the computer network system. IPS is an access control device with a prevention function, which enforces a network security policy, is a helpful device that allows for more granular blocking action. In this paper, we propose a new prediction and prevention method with behavior-based detection, this method is called pitcher flow. We describes the habitual activity of the performance an overall network with a new algorithm for identifying and recognizing the normal behavior of user activities in the internal network. First, we define behavior activity by duration of activity conducted and active connection. Second, we categorize packets into class/type, identifying parameters by classifying the packets. Finally, we use the pitcher flow mechanism to identify and recognize suspicious threats. This paper also describes an algorithm for the complexity of the suspicious response.
| Item Type: | Article |
|---|---|
| Subjects: | Q Science > QA Mathematics > QA75-76.95 Calculating machines > QA75 Electronic computers. Computer science |
| Divisions: | 09-Faculty of Computer Science > 56401-Computer Engineering (D3) |
| Depositing User: | Dr. Deris Stiawan |
| Date Deposited: | 26 Sep 2019 06:16 |
| Last Modified: | 26 Sep 2019 06:16 |
| URI: | http://repository.unsri.ac.id/id/eprint/8339 |
Actions (login required)
 |
View Item |