The neuron security of joint defense for network intrusion detection

The explosive growth in Internet connectivity and e-service has resulted in unprecedented demands for security technologies. Host and network security are getting more critical and more complex due to the diversified and evolved ways of attack form anyplace in Internet world. Most of the technologies been developed are focusing on protecting individual systems and limited scope of network by using different diagnosis and detection approaches. Both commercial and noncommercial solutions, called IDS (intrusion detection system), usually maintain their own proprietary databases by collecting detection patterns. In general, more patterns collected and more up-to-date of the databases surely increase the capabilities of their bundled IDS solutions. However, due to the coverage limitation and late awareness, there still have new growing uncovered breaches that single IDS would not be able to catch up. The reasons are two: 1) Any one proprietary IDS is incapable of collecting so many detection patterns daily brought up in Internet world. 2) Systems under certain proprietary IDS's protection are unable to get instant notification of new detection patterns, most of which are discovered by other IDSs. In order to reduce the risks of coverage limitation and time delay of new types of attack, a joint defense service framework is been proposed, which work as human nervous system to protect every nodes within the system at all.