Verifikasi Peringatan Berdasarkan Klasifikasi Serangan Pada Deteksi Intrusi Kolaboratif

Hakim, Riffin Sukmana and Winarno, Idris and Yuwono, Wiratmoko (2011) Verifikasi Peringatan Berdasarkan Klasifikasi Serangan Pada Deteksi Intrusi Kolaboratif. EEPIS Final Project.

Preview

PDF - Published Version Download (243Kb) | Preview

Abstract

Since long time ago, Intrusion detection system has been used to detect into the computer network or computer it self and to find attacks. Intrusion detection system detects the intrusions of the system according to the activities of the systems. Every activity that supposed as danger activities that is listed will be recorded to the database system of intrusion detection system. Practically, intrusion detection system sometimes detects that less accurate. Sometimes intrusion detection system detects undanger activities (false positive) or does not detect danger activities (false negative). Whenever amount of false positive alert is getting large, event if it becomes alert floods, it will make user complicated to analyze the attack. By using collaboration intrusion detection system then correlate the alerts, it will reduce weakness of intrusion detection system and generate better alert and more accurate. Keywords : Intrusion detection system, alert, false positive, alert correlation, alert collaboration.

Actions (login required)