CONDOR: A Hybrid IDS to Offer Improved Intrusion Detection

DAY, David and FLORES, Denys (2012). CONDOR: A Hybrid IDS to Offer Improved Intrusion Detection. In: 2012 IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom 2012). Institute of Electrical and Electronics Engineers ( IEEE ), 931-936.

Preview

PDF PID2364217.pdf - Accepted Version Download (656kB) | Preview

Abstract

Intrusion Detection Systems are an accepted and very useful option to monitor, and detect malicious activities. However, Intrusion Detection Systems have inherent limitations which lead to false positives and false negatives; we propose that combining signature and anomaly based IDSs should be examined. This paper contrasts signature and anomaly-based IDSs, and critiques some proposals about hybrid IDSs with signature and heuristic capabilities, before considering some of their contributions in order to include them as main features of a new hybrid IDS named CONDOR (COmbined Network intrusion Detection ORientate), which is designed to offer superior pattern analysis and anomaly detection by reducing false positive rates and administrator intervention.

Item Type:	Book Section
Research Institute, Centre or Group - Does NOT include content added after October 2018:	Cultural Communication and Computing Research Institute > Communication and Computing Research Centre
Departments - Does NOT include content added after October 2018:	Faculty of Science, Technology and Arts > Department of Computing
Identification Number:	https://doi.org/10.1109/TrustCom.2012.110
Page Range:	931-936
Depositing User:	David Day
Date Deposited:	31 May 2012 09:53
Last Modified:	18 Mar 2021 13:47
URI:	https://shura.shu.ac.uk/id/eprint/5246

Actions (login required)

View Item

Downloads

Publication Metrics