LDLB: A light intrusion prevention system in data link layer

Intrusion detection systems (IDS) are fundamentally passive and fail-open. Because their primary task is classification, they do nothing to prevent an attack from succeeding. An intrusion prevention system (IPS) is deployed in-line with its capability to provide real-time and active defense. It makes attempts to stop attacks. This paper presents the design and implementation of LDLB: a light intrusion prevention system in data link layer, which is composed of packet filter module, intrusion detection module and intrusion prevention module. It doesnpsilat perform any modification on the passing packets as well as bridge so it is transparent for intruders. Additionally, its configuration and deployment strategy are also discussed. In short, LDLB provides synthesis security prevention in data link layer.