作者: Ronald J. Gula , Martin F. Roesch
DOI:
关键词: Exploit 、 Computer security 、 Engineering 、 Intrusion detection system 、 Attack model 、 Virtual network 、 Server 、 Class (computer programming) 、 Identification (information) 、 Application software
摘要: A method and apparatus is disclosed for increasing the security of computer networks through use an Intrusion Misuse Deterrence System (IMDS) operating on network. The IMDS a system that creates synthetic network complete with hosts routers. It comprised server associated application software appears to be legitimate portion real intruder. consequently invites inquiry entices intruder away from Simulated services are configured appear running virtual clients globally unique, class “C” IP addresses. Since there no users simulated by IMDS, all such activity must inappropriate can treated as such. Consequently, entire set transactions collected identified rather than just those meet predefined attack profile. Also, new exploits attacks handled effectively known attacks, resulting in better identification methodologies well analysis types. only has concerned traffic going its it additionally eliminates bandwidth limitation plagues traditional intrusion detection (IDS).