A Scheme for the Design and Implementation of a Distributed IDS

This paper proposes a scheme for the design and implementation of a new security architecture for protecting exposed Intranets or groups of computers in a network from malicious attacks. The proposed scheme presents an approach of building a distributed intrusion detection system for a network by using the network based intrusion detection system sensors at several places in the network and then communicating the alert information generated by the network intrusion detection system sensors to all the hosts present in the network for a dynamic policy update. The dynamic policy is updated using the IPtables for Linux hosts and for Windows hosts the policy update is carried out using a new Windows firewall application that has been developed.