Performance Comparison Between Centralized And Distributed IDS

Noor Idham , Sulaiman (2010) Performance Comparison Between Centralized And Distributed IDS. Project Report. UTeM, Melaka, Malaysia. (Submitted)

	PDF (24 Pages) Performance_Comparison_Between_Centralized_Anddistributed_IDS_-_Noor_Idham_b_Sulaiman_-_TK5105.59.N52_2010_24_Pages.pdf - Submitted Version Download (5MB)
	PDF (Full Text) Performance_Comparison_Between_Centralized_Anddistributed_IDS_-_Noor_Idham_b_Sulaiman_-_TK5105.59.N52_2010.pdf - Submitted Version Restricted to Registered users only Download (62MB)

Abstract

This project is focusing on Intrusion Detection System (IDS). IDS have two types which is Centralized IDS and Distributed IDS. This project will make a comparison between them to determine which will give the best result in term of performances. The performances that will be measured in this project are CPU, Memory, 110, Disk Utilization and Alert. There is a new data and old data in Distributed IDS and Centralized IDS. The old data and the new data have four types of VLAN that had divided from Centralized IDS which each of them will be tested and analyzed. The performances on Centralized IDS also will be tested same as Distributed IDS but in different way. It is require an equipment or software such as TOP, HTOP and NMON to make an analysis. TOP and HTOP has capability to analyzed the used of CPU and Memory, while NMON has the capability to analyzed CPU, Memory, 110 and Disk Utilization. The important software for this project is Snort. Snort will be used to detect an alert in the conducted data. The Snort can detect the alert but not to avoid it. The operating system that had been used in this project is Ubuntu 9.04 and Ubuntu 9.10.

Actions (login required)

View Item