A study of high sensitive illegal access detection system using distributed and cooperative scan detecting method.

点击翻译按钮获取中文摘要

In recent years, networks without sharing the common media come into wide use. The SCAN, a sign of illegal accesses has become very difficult to detect for their crafty trick.In this research, we have proposed a distributed and cooperative manner to detect these SCANs successfully by dispersing the NIDSs on monitoring locations of networks. The simulation of using real networks data showed effectiveness of our proposed method. Comparing the traditional methods, the proposed method can detect SCANs in short time. Furthermore, the proposed method can restrain redundant control messages, so that only small amount of traffic between the manager and NIDSs are needed for managing the system. From these results, we can say this research has achieved its goal.