A Fast and Reliable IDS Analyzer

Intrusion detection systems (IDSs) are one of the most important issues in the field of network security. These systems usually use databases to store and log the alerts which have been detected by IDS sensors from the network traffic. One of the main problems which can be encountered is generating a huge amount of data and storing them in the database. This amount of data makes database very slow and at more data makes it unusable until data has been removed from database by administrators. In this paper we apply a two level data management approaches that remove old data from database. In this method, we abstract the database in a second level table and keep the number of entries in this table less than a predefined threshold. This method makes our IDS analyzer fast enough even when there is a long time attack.

کلیدواژه ها:

IDS analyzer ، Intrusion Detection System (IDS) ، snort