Classification, testing and optimization of intrusion detection systems

Modem network security products vary greatly in their underlying technology and architecture. Since the introduction of intrusion detection decades ago, intrusion detection technologies have continued to evolve rapidly. This rapid change has led to the introduction of a wealth of security devices, technologies and algorithms that perform functions originally associated with intrusion detection systems. This thesis offers an analysis of intrusion detection technologies, proposing a new classification system for intrusion detection systems. Working closely with the development of a new intrusion detection product, this thesis introduces a method of testing related technologies in a production environment by outlining and executing a series of denial of service and scan and probe attacks. Based on the findings of these experiments, a series of enhancements to the core intrusion detection product is introduced to improve its capabilities and adapt to modem needs of security products.

Name thesis:degree_name

Master of Science in Computer Engineering - (M.S.)

Discipline thesis:degree_discipline

Electrical and Computer Engineering

Year

2006

Author dc:creator

• Leon, Javier

Contributors dc:contributor

• Constantine N. Manikopoulos
• Robert Statica
• Jie Hu

• Intrusion detection technology
• Intrusion detection classification
• Intrusion detection optimization
• Computer Engineering

Repository record dc:identifier

https://digitalcommons.njit.edu/theses/429

OAI identifier oai:identifier

oai:digitalcommons.njit.edu:theses-1428