A multi-level security based autonomic parameter selection approach for an effective and early detection of internet worms

Kumar Simkhada, Tarik Taleb, Yuji Waizumi, Abbas Jamalipour, Kazuo Hashimoto, Nei Kato, Yoshiaki Nemoto

研究成果: Conference contribution

2 引用 (Scopus)

抜粋

In light of the fast propagation of recent Internet worms, human intervention in securing the Internet during worm outbreaks is of little significance. In order to reduce the damage worms may cause, existing Intrusion Detection Systems (IDSs) need to be adaptive to the security-related requirements of their monitoring networks. This paper presents a Multilevel security based Autonomic Parameter Selector (MAPS) that can be implemented over any existing IDSs. The deployment architecture consists of a number of hierarchically placed local security managers, metropolitan security managers, and a global security manager. These security managers report events to a Worm Advisory System (WAS). WAS accordingly sets the threat level of the network. Based on this level, MAPS selects the most optimum parameters for the entire IDS to combat against the propagating worm. The MAPS architecture maintains the system performance by constantly evaluating three metrics, namely False Negative Avoidance, False Positive Avoidance, and Performance Overhead. Extensive experiments, using real network traffic and a recently proposed worm detection system, demonstrate that MAPS is capable of advising an IDS with optimum parameter values to effectively and promptly hinder further propagation of worms.

元の言語English
ホスト出版物のタイトルIEEE GLOBECOM 2006 - 2006 Global Telecommunications Conference
DOI
出版物ステータスPublished - 2006
イベントIEEE GLOBECOM 2006 - 2006 Global Telecommunications Conference - San Francisco, CA, United States
継続期間: 2006 11 272006 12 1

出版物シリーズ

名前GLOBECOM - IEEE Global Telecommunications Conference

Other

OtherIEEE GLOBECOM 2006 - 2006 Global Telecommunications Conference
United States
San Francisco, CA
期間06/11/2706/12/1

ASJC Scopus subject areas

  • Engineering(all)

フィンガープリント A multi-level security based autonomic parameter selection approach for an effective and early detection of internet worms' の研究トピックを掘り下げます。これらはともに一意のフィンガープリントを構成します。

  • これを引用

    Simkhada, K., Taleb, T., Waizumi, Y., Jamalipour, A., Hashimoto, K., Kato, N., & Nemoto, Y. (2006). A multi-level security based autonomic parameter selection approach for an effective and early detection of internet worms. : IEEE GLOBECOM 2006 - 2006 Global Telecommunications Conference [4150932] (GLOBECOM - IEEE Global Telecommunications Conference). https://doi.org/10.1109/GLOCOM.2006.302