A Secure and Efficient Model for Network Defensive Systems

Abstract

Using conventional technology, a network administrator has to do multifarious work to adapt the security system to block the intruders. In order to make a network defensive system more sensitive, automatic and reactive timely and correctly upon intrusions, we propose a secure and efficient model for network security in this paper. We make use of a dispatcher and both of the characteristics of firewall and intrusion detection to against attacks. Incoming packets are distributed averagely to two or more firewalls, mitigate the load of firewalls, and forward packets in different route successfully. An experimental model has been set up for verifying the novel approach we proposed. By conducting a series of experiments, we can see that the proposed model is advantageous for both of security and efficiency. The dispatcher is responsible for the even partition of all incoming packets between firewalls. The intrusion detection system can detect the bulk of intrusion or attack behavior. Based on IDS alert logs, firewalls can update their rules automatically to deny the attacker’s packets.