60 likes | 159 Views
Next Generation Intrusion Detection Expert System (NIDES). Components of NIDES. Persistent Storage Agen ArPool Statistical Analysis Component Rule Based Analysis Component Resolver Archiver Batch Analysis User Interface. Persistent Storage. It contains :
E N D
Next Generation Intrusion Detection Expert System (NIDES)
Components of NIDES • Persistent Storage • Agen • ArPool • Statistical Analysis Component • Rule Based Analysis Component • Resolver • Archiver • Batch Analysis • User Interface
Persistent Storage • It contains : • Audit Record Archieve • Result Archive • User Statistical Profile • Analysis Configuration
Statistical Analysis Component • Maintains Historical Statistical Profile For each user • Updated Regularly • Detects Anomaly
Rule Based Analysis Component • Detects known intrusion types • Detects intruders who are in violation of site security policy.
NIDES Process Graph : Target Host 1 Target Host N Target auditing system Native format audit data Target auditing system Native format audit data agen agen NIDES format audit data NIDES format audit data Arpool NIDES format audit data NIDES format audit data Statistical Analysis Rule based Analysis Statistical Analysis Results Rule based Analysis Results Resolver Resolved Analysis Results User Interface