Metrics
102 Record Views
Conference proceeding
A process to transfer Fail2ban data to an adaptive enterprise intrusion detection and prevention system
SoutheastCon 2016, Vol.2016, pp.1-4
SoutheastCon (Norfolk, VA, USA, 03/30/2016–04/03/2016)
03/01/2016
Web of Science ID: WOS:000387067900065
Abstract
In this paper, we describe a process that has been developed to transfer network intrusion data captured by Fail2ban to an adaptive enterprise intrusion detection and prevention system. The process involves software agents that we have created that are interconnected to a central behavior analysis database service where each software agent records attack meta-information collected during previous intrusion attempts. These distributed agents are the first phase of an overall plan to create a smarter network defense system through the collection and analysis of network signatures generated by real security threats. The central database to which the agents report warehouses and analyzes the meta-information collected by the interconnected agents. The agents can then utilize both instantaneous and historical data by integrating rules derived from the data collection and analysis process into intrusion prevention policies. The final result will be a modular and scalable network defense system that should be more responsive and adaptable to imminent threats.
Related links
Details
- Title
- A process to transfer Fail2ban data to an adaptive enterprise intrusion detection and prevention system
- Publication Details
- SoutheastCon 2016, Vol.2016, pp.1-4
- Resource Type
- Conference proceeding
- Conference
- SoutheastCon (Norfolk, VA, USA, 03/30/2016–04/03/2016)
- Publisher
- IEEE
- Copyright
- © 2016, IEEE
- Identifiers
- WOS:000387067900065; 99380178264106600
- Academic Unit
- Hal Marcus College of Science and Engineering ; Cybersecurity and Information Technology
- Language
- English