Show simple item record

dc.contributor.advisorMichael, James Bret
dc.contributor.advisorMcEachen, John
dc.contributor.authorJudd, John David
dc.dateJune 2003
dc.date.accessioned2012-03-14T17:30:07Z
dc.date.available2012-03-14T17:30:07Z
dc.date.issued2003-06
dc.identifier.urihttp://hdl.handle.net/10945/967
dc.description.abstractOne of the most significant challenges with modern intrusion detection systems is the high rate of false alarms that they generate. In order to lower this rate, we propose to reduce the amount of traffic sent a given intrusion detection system via a filtering process termed stream splitting. Each packet arriving at the system is treated as belonging to a connection. Each connection is then assigned to a network stream. A network stream can then be sent to an analysis engine tailored specifically for that type of data. To demonstrate a stream-splitting capability, both an extendable multi-threaded architecture and prototype were developed. This system was tested to ensure the ability to capture traffic and found to be able to do so with minimal loss at network speeds up to 20 Mb/s, comparable to several open-source analysis programs. The stream splitter was also shown to be able to correctly implement a traffic separation scheme.en_US
dc.description.urihttp://archive.org/details/streamsplittingi10945967
dc.format.extentxviii, 166 p. : ill. (some col.)en_US
dc.publisherMonterey, California. Naval Postgraduate Schoolen_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.en_US
dc.subject.lcshElectronic alarm systemsen_US
dc.subject.lcshComputer networksen_US
dc.subject.lcshSecurity measuresen_US
dc.titleStream splitting in support of intrusion detectionen_US
dc.typeThesisen_US
dc.contributor.departmentComputer Science (CS)
dc.subject.authorIntrusion detection systemen_US
dc.subject.authorStream splittingen_US
dc.subject.authorFuzzy logicen_US
dc.description.serviceEnsign, United States Navyen_US
etd.thesisdegree.nameM.S. in Computer Scienceen_US
etd.thesisdegree.levelMastersen_US
etd.thesisdegree.disciplineComputer Scienceen_US
etd.thesisdegree.grantorNaval Postgraduate Schoolen_US
etd.verifiednoen_US
dc.description.distributionstatementApproved for public release; distribution is unlimited.


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record