Increasing a postprocessor in intrusion detection systems to use in switches

摘要

In ten years ago accomplished many efforts to improve the power of intrusion detection systems (IDS). These systems divided in three important components named as Information Collection, Detect and Response. We propose in this paper creating an extra component named Postprocessor in IDSs for improve the flexibility of them. Also a protocol is proposed in physical layer in TCP/IP model to send the results of IDSs from Postprocessor to switches in the network. With this, all switches can detect attacks only with a microcontroller that is placed in them. Also we will show the overhead traffic that is entered in networks reduce by the time.