Enhancing Collaborative Intrusion Detection Methods Using a Kademlia Overlay Network

摘要: The two important problems of collaborative intrusion detection are aggregation and correlation events. enormous amount data generated by probes requires significant network computational capacity to be processed. In this article we show that a distributed hash table based approach can reduce both load detection, while providing almost the same accuracy as centralized solutions. efficiency storage improved selecting Kademlia underlying overlay topology, its routing easily adapt dynamic properties such an application.