Automatic selection of filtering devices in a distributed intrusion prevension system

We presented in a previous article [1] a distributed intrusion prevention system based on honeypots for collecting malicious data. Among important questions to handle there is the choice of filtering device on which a filtering rule has to be applied. In this paper we propose a solution which will allow automatic selection of filtering device in the distributed IPMS platform. These devices will be configured to block unauthorized traffic. This solution must ensure full integration with the IPMS architecture. © 2005 - 2013 JATIT & LLS. All rights reserved.