Applying semantic web and user behavior analysis to enforce the intrusion detection system

2009 ◽  
Author(s):  
Y.-T.F. Chan ◽  
C.A. Shoniregun ◽  
G.A. Akmayeva ◽  
A. Al-Dahoud
Keyword(s):  
Intrusion Detection ◽  
Semantic Web ◽  
Behavior Analysis ◽  
Intrusion Detection System ◽  
User Behavior ◽  
Detection System ◽  
User Behavior Analysis

A semantic web enabled host intrusion detection system

2018 ◽  
Vol 13 (1) ◽  
pp. 68
Author(s):  
Batuhan Erdoğdu ◽  
Okan Bursa ◽  
Emine Sezer ◽  
Murat Osman Ünalır ◽  
Özgü Can
Keyword(s):  
Intrusion Detection ◽  
Semantic Web ◽  
Intrusion Detection System ◽  
Detection System

scholarly journals An Effective Fault-Tolerant Intrusion Detection System under Distributed Environment

2021 ◽  
Vol 2021 ◽  
pp. 1-9
Author(s):  
Bo Hong ◽  
Hui Wang ◽  
Zijian Cao
Keyword(s):  
Intrusion Detection ◽  
Data Storage ◽  
Intrusion Detection System ◽  
User Behavior ◽  
Fault Tolerant ◽  
Detection System ◽  
Single Point ◽  
Denial Of Service ◽  
Distributed Environment ◽  
Network Bandwidth

Traditional intrusion detection system is limited to a single network or several hosts, which has been seriously unable to fulfill the growing information security problems. This paper uses the distributed technology to design and implement an intrusion detection system (IDS) based on the hybrid of Hadoop with some effective open-source technologies. On the one hand, it can efficiently realize the data acquisition and analysis under distributed environment. On the other hand, it can solve the problems of single-point fault-tolerant and the insufficient data processing capacity of the traditional intrusion detection system. In this IDS, RabbitMQ, Flume, and MongoDB are utilized to act as the middleware of this system to build the system environment which includes the collector, analyzer, and data storage. By detecting the CPU and memory usage of hosts, TCP connections, network bandwidth, web server operation logs, and the logs of user behavior, the proposed IDS especially focuses on monitoring the first four parts, which can better detect external distributed denial of service attacks and intrusions and send automatically alarm service information to the administrators.

A semantic web enabled host intrusion detection system

2018 ◽  
Vol 13 (1) ◽  
pp. 68 ◽  
Author(s):  
Özgü Can ◽  
Murat Osman Ünallır ◽  
Emine Sezer ◽  
Okan Bursa ◽  
Batuhan Erdoğdu
Keyword(s):  
Intrusion Detection ◽  
Semantic Web ◽  
Intrusion Detection System ◽  
Detection System
Sign in / Sign up

Export Citation Format

Share Document