Building an inter-IDS central analysis platform in the network center of China's Central Bank

Abstract

In this paper, we present a new model that makes use of currently-separate intrusion detection systems (IDS) to share intersystem alarm information between homogeneous protected systems. The goal is to improve the overall intrusion detection performance provided by the IDSs used in China's commercial banking system. This model focuses mainly on improving the average intrusion detection performance of the collection of IDSs by making the subscribed IDSs cooperate. The estimates presented in this paper show that this proposal results in a valuable improvement of the whole banking system's security compared to the cost and overhead to the network