An Effective Fault-Tolerant Intrusion Detection System under Distributed Environment
| Autor: | Hui Wang, Zijian Cao, Bo Hong |
|---|---|
| Rok vydání: | 2021 |
| Předmět: |
Technology
Web server Distributed Computing Environment Article Subject Computer Networks and Communications business.industry Computer science Fault tolerance Denial-of-service attack TK5101-6720 Information security Intrusion detection system computer.software_genre Middleware (distributed applications) Computer data storage Telecommunication Electrical and Electronic Engineering business computer Information Systems Computer network |
| Zdroj: | Wireless Communications and Mobile Computing, Vol 2021 (2021) |
| ISSN: | 1530-8677 1530-8669 |
| Popis: | Traditional intrusion detection system is limited to a single network or several hosts, which has been seriously unable to fulfill the growing information security problems. This paper uses the distributed technology to design and implement an intrusion detection system (IDS) based on the hybrid of Hadoop with some effective open-source technologies. On the one hand, it can efficiently realize the data acquisition and analysis under distributed environment. On the other hand, it can solve the problems of single-point fault-tolerant and the insufficient data processing capacity of the traditional intrusion detection system. In this IDS, RabbitMQ, Flume, and MongoDB are utilized to act as the middleware of this system to build the system environment which includes the collector, analyzer, and data storage. By detecting the CPU and memory usage of hosts, TCP connections, network bandwidth, web server operation logs, and the logs of user behavior, the proposed IDS especially focuses on monitoring the first four parts, which can better detect external distributed denial of service attacks and intrusions and send automatically alarm service information to the administrators. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|
Plný text