International Journal of Computer Applications |
Foundation of Computer Science (FCS), NY, USA |
Volume 64 - Number 8 |
Year of Publication: 2013 |
Authors: M. Ambika, R. V. Nataraj |
10.5120/10655-5421 |
M. Ambika, R. V. Nataraj . Architecture for Real Time Monitoring and Modeling of Network Behavior for Enhanced Security. International Journal of Computer Applications. 64, 8 ( February 2013), 21-25. DOI=10.5120/10655-5421
Network security is a rapidly growing and is the major area of concern for every network. Firewalls are used as a security check point in network environment even then different types of security issues keep on emerging. In order to protect the network from illegal access, the concept of Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) is been developed. An IDS is a system where the events occurring in a network is monitored and analyzed for identifying the sign of possible incidents. These incidents may either be violations or the threats that are about to happen violating the computer security policies or standard security policies. Java programming language is made use for developing the Intrusion Detection System. JPCap package is used along with winpcap for developing the traffic monitoring system. The network packets are captured online i. e. , as they come across the interface of the network. The IDS is aimed to provide the preliminary level of detection techniques so as to secure the systems present in the networks.