String matching enhancement for snort IDS
Book chapter
S. O. Al-Mamory, Ali Hamid, A. Abdul-Razak and Z. Falah 2010. String matching enhancement for snort IDS. in: 5th International Conference on Computer Sciences and Convergence Information Technology IEEE. pp. 1020-1023
Authors | S. O. Al-Mamory, Ali Hamid, A. Abdul-Razak and Z. Falah |
---|---|
Abstract | Intrusion Detection System (IDS) is a security technology that attempts to identify intrusions. Snort is an open source IDS which enables us to detect the previously known intrusions. However, Snort IDS has several problems one of them is the efficiency problem. We suggest using distributed environment in order to enhance it. We achieved this goal by enhancing the Snort's string matching engine through using a LAN of computers, where each computer in the LAN matching a subset of the monitored attacks. The experimental results show that it is possible to improve Snort's efficiency using distributed environment. In addition, Snort's testability has been enhanced. |
Keywords | Algorithm design and analysis; Snort IDS; Intrusion detection system; Open source IDS; LAN |
Page range | 1020-1023 |
Year | 2010 |
Book title | 5th International Conference on Computer Sciences and Convergence Information Technology |
Publisher | IEEE |
Output status | Published |
ISBN | 9788988678305 |
9781424485673 | |
Publication dates | |
Online | 10 Feb 2011 |
Publication process dates | |
Deposited | 28 Apr 2023 |
Digital Object Identifier (DOI) | https://doi.org/10.1109/ICCIT.2010.5711211 |
Official URL | https://ieeexplore.ieee.org/abstract/document/5711211 |
https://repository.canterbury.ac.uk/item/93q95/string-matching-enhancement-for-snort-ids
35
total views0
total downloads0
views this month0
downloads this month