The Design of Cooperative Intrusion Detection System

The next generation Internet protocol IPv6 brings a new challenge to the information security. We present a cooperative intrusion detection system based on IPv6 to address this challenge. Such a system consists of fours parts i.e. data flow tracking and analysis, capturing packets and rules matching, disaster recovery, and blocking. The technique of cooperative intrusion detection is introduced into the system for realizing the coordination control among parts. The simulations show that the percentage of false negative of the system is around 5.1% and the percentage of false positive is around 7.9%. The system has a good detection rating. If the LAN suffers a large scale terrible intrusion, the system will cut off the sub-network by a block-out algorithm.