Use of Intrusion Detection System for Improvement in Information System



Use of Intrusion Detection System for Improvement in Information System

Introduction

Tools for security of computers and networks are required to provide secure transactions and communication of data between two information systems. Generally the institutions concentrate on their defenses regarding preventive tools such as firewalls but end up ignoring the tools for intrusion detection (IDS - Intrusion Detection System).

In the first part of this paper we will make an analogy between the defense system of living things and the future (or current) IDS tools to clarify the concept of confidentiality and integrity in IDS, the second part will deal with some aspects of the "anatomy" of IDS tools and finally we make some considerations about the legal aspects concerning the data collected by such systems.

Discussion

IDS in Information Systems Compared with Protection System in Living Beings

The Analogy

The antibodies are the most specific defense mechanism that our body has. Antibodies play important role in protecting our body against foreign substances. When a foreign substance is injected into an animal, certain white blood cells, and lymphocytes are produced and released into the bloodstream. A special type of protein capable of joining specifically to foreign molecule and inactivating it is then developed. The protein is synthesized to individually respond to foreign material, called antibody, and foreign substances that induce the synthesis of antibodies, called antigens.

We have two types of immunization systems, they are

Active immunization: It is the natural occurrence of immunity in human beings. In human it starts from the 3rd month of fetal life, between the 4th and 6th month of fetal life other organs supplement the immune system. Because the immune system is established only after the 3rd month, during the first three months of life, the fetus is unable to fend for their own means against possible infections that cross the placental barrier. At this stage, the fetus has only the passive immunization (antibodies that exist in the mother), transferred from mother to child through the placenta.

Passive immunization - An animal is immunized against a specific antigen. This immunization is made by injection increasingly concentrated antigen in the animal. The animal reacts to this antigen producing increasing amounts of specific antibodies that accumulate in the blood. After immunization, blood is extracted from the immunized animal blood and the fraction containing the antibody molecules are separated. This fraction is called rich in antibodies and serum is injected into the bloodstream of the person you wish to immunize.

One of the main objectives of an intrusion detection system or IDS, is to detect if someone is trying to enter your system or if a legitimate user is misusing it. This tool runs continuously (24 x 7) in the background and only generates a notification when it detects something that is suspicious or illegal, therefore we can say that the placenta corresponds to the systems of firewalls, passive immunity is within the sensors and the patterns are Attack/signatures, i.e. attacks known in advance active immunity are also ...