TIIS (한국인터넷정보학회)
Current Result Document :
| 한글제목(Korean Title) |
Intrusion Detection System for Home Windows based Computers |
| 영문제목(English Title) |
Intrusion Detection System for Home Windows based Computers |
| 저자(Author) |
Matej Zuzčák
Tomáš Sochor
Milan Zenka
|
| 원문수록처(Citation) |
VOL 13 NO. 09 PP. 4706 ~ 4726 (2019. 09) |
한글내용
(Korean Abstract) |
|
영문내용
(English Abstract) |
The paper is devoted to the detailed description of the distributed system for gathering data from Windows-based workstations and servers. The research presented in the beginning demonstrates that neither a solution for gathering data on attacks against Windows based PCs is available at present nor other security tools and supplementary programs can be combined in order to achieve the required attack data gathering from Windows computers. The design of the newly proposed system named Colander is presented, too. It is based on a client-server architecture while taking much inspiration from previous attempts for designing systems with similar purpose, as well as from IDS systems like Snort. Colander emphasizes its ease of use and minimum demand for system resources. Although the resource usage is usually low, it still requires further optimization, as is noted in the performance testing. Colander’s ability to detect threats has been tested by real malware, and it has undergone a pilot field application. Future prospects and development are also proposed.
|
| 키워드(Keyword) |
Network intrusion detection system
IDS
packet
threat
threat analysis
signature
|
| 파일첨부 |
PDF 다운로드
|
