Virtual Inline: A Technique of Combining IDS and IPS Together in Response Intrusion

The Intrusion Detection Systems (IDSs) play an important role in monitoring networks, but they lack abilities in automated intrusion response; the Intrusion Prevention Systems (IPSs) can guard networks in entrance, but they have no abilities in response inner-intranet attacks; many proposals focus on solutions in automated intrusion response, but they still have various problems existed, the main challenge is the accurate measurement of those related factors. This paper presents a virtual inline technique which is based on the technique of the Man in the Middle attack (MITM), it combines the NIDS and NIPS together in providing all-wave protection to networks. This technique integrates the advantages of both IDSs and IPSs, and avoids their shortages; it also avoids those problems baffle our researchers in this field. Empirical experiments show this technique is practicable.