Comparative study between signature-based and anomaly-based network intrusion detection system (SBNIDS and ABNIDS)

Chiadighikaobi, Ikenna Rene (2015) Comparative study between signature-based and anomaly-based network intrusion detection system (SBNIDS and ABNIDS). [Final Year Project Report] (Unpublished)

	PDF Chiadighikaobi(24pgs).pdf Download (4MB)
	PDF (Please get the password by email to repository@unimas.my , or call ext: 3914 / 3942 / 3933) Chiadighikaobi(fulltext).pdf Restricted to Registered users only Download (28MB)

Abstract

The rise in numbers of network intrusion is related to the growth and importance of the Internet in our daily live. I order to provide protection to organizations information / data, Intrusion Detection System (IDS) plays an important role in Network security. Signaturebased intrusion detection focus on matching attack signature with the already stored signature in the database, it generates an alert if the incoming packets signature matches with the one in the database. Signature-based is vulnerable against newly emerging attacks, because the signature is not yet stored in the database, this leave this detection technique with the problem of false negative rate. On the other hand, Anomaly-based detection techniques which is a behaviour techniques, detects the abnormal behaviour in a computer systems and networks. The deviation of packets from normal behaviour is considered as attack. This leaves this technique with the problem of false positive rate. In this proposed project we will be making a comparative study of Signature-based and Anomaly-based IDS in order to select suitable comparison parameters between different approach in network intrusion detection, to evaluate suitable software/system for deploying Signature-based and Anomaly-based detection and to conduct experimental study to evaluate the differences in selected parameters in different approach in network intrusion detection. This project will provide a comparative analysis result between SBNIDS and ABNIDS after the evaluation study using DARPA dataset and we will be able to select a suitable techniques in the area of performance, efficiency in data size and non-functional parameters like CPU and Memory usage, which the result proposed that ABNIDS is better than SBNIDS and the conclusion was based on the evaluated parameters.

Actions (For repository members only: login required)

View Item