On Distributed Intrusion Detection Systems design for high speed networks

Ouissem Ben Fredj; Hassen Sallay; Adel Ammar; Mohsen Rouached; Khaled Al-Shalfan; Majdi Ben Saad

On Distributed Intrusion Detection Systems design for high speed networks

Ouissem Ben Fredj, Hassen Sallay, Adel Ammar, Mohsen Rouached, Khaled Al-Shalfan, Majdi Ben Saad

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

This article states the need of High Performance Computing (HPC) for Distributed Intrusion Detection Systems (DIDS) and discusses the design requirements of the system. Since high-speed networks are the performance key in HPC, the article studies the mapping of the different requirements over the software and hardware features of high-speed networks. The study has resulted in several recommendation for the design of IDS over HSN, starting from the communication protocol and the programming model that should be adopted, to the way the system should handle the communication flow, the memory management and the data transfer between IDS sensors.

Original language	English
Title of host publication	Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10
Pages	115-120
Number of pages	6
Publication status	Published - 2010
Externally published	Yes
Event	9th WSEAS International Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS International Conference on Information Security and Privacy, ISP'10 - Merida, Venezuela, Bolivarian Republic of Duration: Dec 14 2010 → Dec 16 2010

Publication series

Name	Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10

Other

Other	9th WSEAS International Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS International Conference on Information Security and Privacy, ISP'10
Country/Territory	Venezuela, Bolivarian Republic of
City	Merida
Period	12/14/10 → 12/16/10

Keywords

Architecture
Communication layer
DIDS
HPC
High speed network
RDMA

ASJC Scopus subject areas

Information Systems

Cite this

Fredj, O. B., Sallay, H., Ammar, A., Rouached, M., Al-Shalfan, K., & Saad, M. B. (2010). On Distributed Intrusion Detection Systems design for high speed networks. In Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10 (pp. 115-120). (Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10).

On Distributed Intrusion Detection Systems design for high speed networks. / Fredj, Ouissem Ben; Sallay, Hassen; Ammar, Adel et al.
Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10. 2010. p. 115-120 (Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Fredj, OB, Sallay, H, Ammar, A, Rouached, M, Al-Shalfan, K & Saad, MB 2010, On Distributed Intrusion Detection Systems design for high speed networks. in Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10. Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10, pp. 115-120, 9th WSEAS International Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS International Conference on Information Security and Privacy, ISP'10, Merida, Venezuela, Bolivarian Republic of, 12/14/10.

Fredj OB, Sallay H, Ammar A, Rouached M, Al-Shalfan K, Saad MB. On Distributed Intrusion Detection Systems design for high speed networks. In Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10. 2010. p. 115-120. (Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10).

Fredj, Ouissem Ben ; Sallay, Hassen ; Ammar, Adel et al. / On Distributed Intrusion Detection Systems design for high speed networks. Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10. 2010. pp. 115-120 (Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10).

@inproceedings{7cd2906e65b040d8a277048e35c1c2fa,

title = "On Distributed Intrusion Detection Systems design for high speed networks",

abstract = "This article states the need of High Performance Computing (HPC) for Distributed Intrusion Detection Systems (DIDS) and discusses the design requirements of the system. Since high-speed networks are the performance key in HPC, the article studies the mapping of the different requirements over the software and hardware features of high-speed networks. The study has resulted in several recommendation for the design of IDS over HSN, starting from the communication protocol and the programming model that should be adopted, to the way the system should handle the communication flow, the memory management and the data transfer between IDS sensors.",

keywords = "Architecture, Communication layer, DIDS, HPC, High speed network, RDMA",

author = "Fredj, {Ouissem Ben} and Hassen Sallay and Adel Ammar and Mohsen Rouached and Khaled Al-Shalfan and Saad, {Majdi Ben}",

year = "2010",

language = "English",

isbn = "9789604742585",

series = "Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10",

pages = "115--120",

booktitle = "Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10",

note = "9th WSEAS International Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS International Conference on Information Security and Privacy, ISP'10 ; Conference date: 14-12-2010 Through 16-12-2010",

}

TY - GEN

T1 - On Distributed Intrusion Detection Systems design for high speed networks

AU - Fredj, Ouissem Ben

AU - Sallay, Hassen

AU - Ammar, Adel

AU - Rouached, Mohsen

AU - Al-Shalfan, Khaled

AU - Saad, Majdi Ben

PY - 2010

Y1 - 2010

N2 - This article states the need of High Performance Computing (HPC) for Distributed Intrusion Detection Systems (DIDS) and discusses the design requirements of the system. Since high-speed networks are the performance key in HPC, the article studies the mapping of the different requirements over the software and hardware features of high-speed networks. The study has resulted in several recommendation for the design of IDS over HSN, starting from the communication protocol and the programming model that should be adopted, to the way the system should handle the communication flow, the memory management and the data transfer between IDS sensors.

AB - This article states the need of High Performance Computing (HPC) for Distributed Intrusion Detection Systems (DIDS) and discusses the design requirements of the system. Since high-speed networks are the performance key in HPC, the article studies the mapping of the different requirements over the software and hardware features of high-speed networks. The study has resulted in several recommendation for the design of IDS over HSN, starting from the communication protocol and the programming model that should be adopted, to the way the system should handle the communication flow, the memory management and the data transfer between IDS sensors.

KW - Architecture

KW - Communication layer

KW - DIDS

KW - HPC

KW - High speed network

KW - RDMA

UR - http://www.scopus.com/inward/record.url?scp=79958716445&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=79958716445&partnerID=8YFLogxK

M3 - Conference contribution

AN - SCOPUS:79958716445

SN - 9789604742585

T3 - Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10

SP - 115

EP - 120

BT - Advances in E-Activities, Information Security and Privacy - 9th WSEAS Int. Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS Int. Conference on Information Security and Privacy, ISP'10

T2 - 9th WSEAS International Conference on E-Activities, E-ACTIVITIES'10, 9th WSEAS International Conference on Information Security and Privacy, ISP'10

Y2 - 14 December 2010 through 16 December 2010

ER -

On Distributed Intrusion Detection Systems design for high speed networks

Abstract

Publication series

Other

Keywords

ASJC Scopus subject areas

Other files and links

Fingerprint

Cite this