ISP-operated protection of home networks with FIDRAN

摘要: In order to fight against the increasing number of network security incidents due mal-protected home networks permanently connected Internet via DSL, TV cable or similar technologies, we propose that service providers (ISP) operate and manage intrusion prevention systems (IPS) which are a large extend executed on consumer's gateway (e.g., DSL router). The paper analyses requirements ISP-operated presents our approach for an IPS runs top active networking environment is automatically configured by vulnerability scanner. We call system FIDRAN (Flexible Intrusion Detection Response framework Active Networks). autonomously correspondingly configures IPS. Furthermore, detects adjusts itself changes in (new service, new host, etc.). First performance comparisons show - while offering more flexibility being able support continuous updating principles competes well with conventional like Snort-Inline.