An Adaptive Intrusion Detection and Prevention System Approach to Network Security

Abstract

An Intrusion detection system (IDS) is software and hardware designed to detect unwanted attempts at accessing, manipulating, or disabling of computer systems, mainly through a network, such as the Internet. An intrusion detection system is used to detect several types of malicious behaviors that can compromise the security and trust of a computer system. This includes network attacks against vulnerable services, data driven attacks on applications, host based attacks such as privilege escalation, unauthorized logins and access to sensitive files, and malwares. This paper proposes how to prevent the above hazards in the web server area with a base of HTTP and FTP protocols by filtering the IP’s of the hosts by designing a web server to avoid those vulnerable contents. The web server is called “Smart Web Server”. Moreover we consider the other hazardous files such as unwanted images, banners, attacker’s sites, as problem creating contents. The content filtering approaches under the category of web personalization techniques. Using this approach the unwanted malicious contents are filtered and the system is made secure and faster than the existing one.