A Novel Multi-threaded Network-Based Intrusion Detection and Prevention System

Computer Engineering

Recently, the security of an individual computer to large networks as a result of a dramatic growth of new devices connecting to the internet, has become one of the biggest challenges. Along with growing new types of security attacks, many protection mechanisms have taken to improve the privacy and security of sensitive information. Detection of abnormal behavior can help network administrators to identify intrusions but cannot prevent them from breaking into home network. Furthermore, using traditional methods which firewall and IDPS systems reside in different machines that results to low performance by filtering and checking traffic in multi points. This paper is providing an efficient method of both detecting and preventing network threats efficiently. To achieve such goal, we used a combination of Suricata NIDS and Netfilter Packet filtering framework of Linux based systems.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.