An intrusion prevention system as a proactive security mechanism in network infrastructure

A properly configured firewall is a good starting point in securing a computer network. However, complex network environments that involve higher number of participants and endpoints require better security infrastructure. Intrusion Detection Systems (IDS), proposed as a solution to perimeter defens...

Full description

Bibliographic Details
Main Authors: Dulanović Nenad, Hinić Dane, Simić Dejan
Format: Article
Language:English
Published: University of Belgrade 2008-01-01
Series:Yugoslav Journal of Operations Research
Subjects:
Online Access:http://www.doiserbia.nb.rs/img/doi/0354-0243/2008/0354-02430801109D.pdf
_version_ 1818514277591416832
author Dulanović Nenad
Hinić Dane
Simić Dejan
author_facet Dulanović Nenad
Hinić Dane
Simić Dejan
author_sort Dulanović Nenad
collection DOAJ
description A properly configured firewall is a good starting point in securing a computer network. However, complex network environments that involve higher number of participants and endpoints require better security infrastructure. Intrusion Detection Systems (IDS), proposed as a solution to perimeter defense, have many open problems and it is clear that better solutions must be found. Due to many unsolved problems associated with IDS, Intrusion Prevention Systems (IPS) are introduced. The main idea in IPS is to be proactive. This paper gives an insight of Cobrador Bouncer IPS implementation. System architecture is given and three different Bouncer IPS deployment modes are presented. The Bouncer IPS as a proactive honeypot is also discussed.
first_indexed 2024-12-11T00:13:32Z
format Article
id doaj.art-5c16c60af16f4ef6acd61fb4911af455
institution Directory Open Access Journal
issn 0354-0243
1820-743X
language English
last_indexed 2024-12-11T00:13:32Z
publishDate 2008-01-01
publisher University of Belgrade
record_format Article
series Yugoslav Journal of Operations Research
spelling doaj.art-5c16c60af16f4ef6acd61fb4911af4552022-12-22T01:28:04ZengUniversity of BelgradeYugoslav Journal of Operations Research0354-02431820-743X2008-01-0118110912210.2298/YJOR0801109DAn intrusion prevention system as a proactive security mechanism in network infrastructureDulanović NenadHinić DaneSimić DejanA properly configured firewall is a good starting point in securing a computer network. However, complex network environments that involve higher number of participants and endpoints require better security infrastructure. Intrusion Detection Systems (IDS), proposed as a solution to perimeter defense, have many open problems and it is clear that better solutions must be found. Due to many unsolved problems associated with IDS, Intrusion Prevention Systems (IPS) are introduced. The main idea in IPS is to be proactive. This paper gives an insight of Cobrador Bouncer IPS implementation. System architecture is given and three different Bouncer IPS deployment modes are presented. The Bouncer IPS as a proactive honeypot is also discussed.http://www.doiserbia.nb.rs/img/doi/0354-0243/2008/0354-02430801109D.pdfintrusion prevention systembouncerfirewall
spellingShingle Dulanović Nenad
Hinić Dane
Simić Dejan
An intrusion prevention system as a proactive security mechanism in network infrastructure
Yugoslav Journal of Operations Research
intrusion prevention system
bouncer
firewall
title An intrusion prevention system as a proactive security mechanism in network infrastructure
title_full An intrusion prevention system as a proactive security mechanism in network infrastructure
title_fullStr An intrusion prevention system as a proactive security mechanism in network infrastructure
title_full_unstemmed An intrusion prevention system as a proactive security mechanism in network infrastructure
title_short An intrusion prevention system as a proactive security mechanism in network infrastructure
title_sort intrusion prevention system as a proactive security mechanism in network infrastructure
topic intrusion prevention system
bouncer
firewall
url http://www.doiserbia.nb.rs/img/doi/0354-0243/2008/0354-02430801109D.pdf
work_keys_str_mv AT dulanovicnenad anintrusionpreventionsystemasaproactivesecuritymechanisminnetworkinfrastructure
AT hinicdane anintrusionpreventionsystemasaproactivesecuritymechanisminnetworkinfrastructure
AT simicdejan anintrusionpreventionsystemasaproactivesecuritymechanisminnetworkinfrastructure
AT dulanovicnenad intrusionpreventionsystemasaproactivesecuritymechanisminnetworkinfrastructure
AT hinicdane intrusionpreventionsystemasaproactivesecuritymechanisminnetworkinfrastructure
AT simicdejan intrusionpreventionsystemasaproactivesecuritymechanisminnetworkinfrastructure