Multi-layered based network security defense system

A multi-layered based network security defense system(MNSDS) was presented.MNSDS adopts multi-layered detection technology: for the detection of IP layer,aggregate-based congestion control algorithm(ABCC) was adopted,narrowing the congestion signature,and thus minimizing collateral damage;then,it em...

Full description

Saved in:
Bibliographic Details
Format: Article
Language:zho
Published: Editorial Department of Journal on Communications 2007-01-01
Series:Tongxin xuebao
Subjects:
Online Access:http://www.joconline.com.cn/zh/article/74660191/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841537464799330304
collection DOAJ
description A multi-layered based network security defense system(MNSDS) was presented.MNSDS adopts multi-layered detection technology: for the detection of IP layer,aggregate-based congestion control algorithm(ABCC) was adopted,narrowing the congestion signature,and thus minimizing collateral damage;then,it employs the detection technology based on the artificial immune principle in TCP and UDP layers AIPT,and detects intrusion by creating a rule database and matching the appropriate rule.The simulation results indicate that the system not only can provide relief from DoS/DDoS attacks equally,but also resolve problems existing in the current defense systems such as low speed high false positive probability and high false positive probability,poor real-time and more artificial interventions.
format Article
id doaj-art-7d146f81c73a4b62a83b0319ece15720
institution Kabale University
issn 1000-436X
language zho
publishDate 2007-01-01
publisher Editorial Department of Journal on Communications
record_format Article
series Tongxin xuebao
spelling doaj-art-7d146f81c73a4b62a83b0319ece157202025-01-14T08:35:40ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2007-01-01616974660191Multi-layered based network security defense systemA multi-layered based network security defense system(MNSDS) was presented.MNSDS adopts multi-layered detection technology: for the detection of IP layer,aggregate-based congestion control algorithm(ABCC) was adopted,narrowing the congestion signature,and thus minimizing collateral damage;then,it employs the detection technology based on the artificial immune principle in TCP and UDP layers AIPT,and detects intrusion by creating a rule database and matching the appropriate rule.The simulation results indicate that the system not only can provide relief from DoS/DDoS attacks equally,but also resolve problems existing in the current defense systems such as low speed high false positive probability and high false positive probability,poor real-time and more artificial interventions.http://www.joconline.com.cn/zh/article/74660191/multi-intrusion detectionimmune techniqueadaptive responseaggregates
spellingShingle Multi-layered based network security defense system
Tongxin xuebao
multi-intrusion detection
immune technique
adaptive response
aggregates
title Multi-layered based network security defense system
title_full Multi-layered based network security defense system
title_fullStr Multi-layered based network security defense system
title_full_unstemmed Multi-layered based network security defense system
title_short Multi-layered based network security defense system
title_sort multi layered based network security defense system
topic multi-intrusion detection
immune technique
adaptive response
aggregates
url http://www.joconline.com.cn/zh/article/74660191/