Research on intelligent Intrusion Detection Systems

Recently in Japan as well as other countries, the spread of ASDL and other types of broadband connection has increased the availability of high speed data communications greatly. However, security (for the purposes of this research, limited to internet security) is largely unchanged and many sites do not maintain an adequate level of security. The goal of this research project is to contribute to the state of Intrusion Detection Systems(IDS) functionality and create a relatively low-cost system with real world usability. The target system will be present at strategic locations within a network and monitor the flow of packets in and out of the network analyzing attack and intrusion patterns at line speed. In the event of identifying a known attack or intrusion, the system will take an appropriate action to neutralize the threat. The system will also a compare unknown packet types to large database of network traffic activity, use various levels of reasoning to make a 'best judgment' regarding the action to be taken and record a new association in the database. In addition to the above functionality, the system will employ agents that interface with free distributed network tools and created a distributed operation environment as well control a selected set of network devices.