期刊名称:International Journal of Computer Science and Network Security
印刷版ISSN:1738-7906
出版年度:2009
卷号:9
期号:7
页码:168-177
出版社:International Journal of Computer Science and Network Security
摘要:Intrusion-detection systems endeavor at detecting attacks against networks or, in general, against information systems. Undeniably, it is convoluted to provide provably secure network and to maintain them in such a secure state during their lifetime and utilization. Sometimes, legacy or operational constraints do not even allow the definition of a fully secure network. Therefore, intrusion detection systems have the task of monitoring the usage of such systems to detect any apparition of insecure states. They detect attempts and active misuse either by legitimate users of the systems or by external parties to abuse their privileges or exploit security vulnerabilities.[1] This paper covers overview and analysis of Intrusion Detection Systems tools for detecting intrusions in Wireless Local Area Networks (WLAN). Twenty five research and commercial systems are evaluated based on some common parameters. A taxonomy especially designed for intrusion detection systems (IDS) is utilized to compare and evaluate different features and aspects of the products. This paper identifies a number of important design and implementation issues which provide a framework for evaluating or deploying intrusion detection systems.