Affiliation:
1. Institute of Computer Science Foundation for Research & Technology - Hellas
2. Univ. of Pennsylvania
Abstract
While the use of network intrusion detection systems (nIDS) is becoming pervasive, evaluating nIDS performance has been found to be challenging. The goal of this study is to determine how to generate realistic workloads for nIDS performance evaluation. We develop a workload model that appears to provide reasonably accurate estimates compared to real workloads. The model attempts to emulate a traffic mix of different applications, reflecting characteristics of each application and the way these interact with the system. We have implemented this model as part of a traffic generator that can be extended and tuned to reflect the needs of different scenarios. We also present an approach to measuring the capacity of a nIDS that does not require the setup of a full network testbed.
Publisher
Association for Computing Machinery (ACM)
Reference29 articles.
1. Nlanr/dast: Iperf - the tcp/udp bandwidth measurement tool. http://dast.nlanr.net/Projects/Iperf/. Nlanr/dast: Iperf - the tcp/udp bandwidth measurement tool. http://dast.nlanr.net/Projects/Iperf/.
2. E 2 xB: A Domain-Specific String Matching Algorithm for Intrusion Detection
3. Performance analysis of content matching intrusion detection systems
4. A fast string searching algorithm
Cited by
37 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献