A Slow Intelligent Approach for the Improvement of Intrusion Detection and Prevention System

Computer network security is a fashionable and fast-moving field. In the last decade many methodologies and tools have been developed for improving the security of networks and their hosts, but the resources used to deal with the problem often do not yield results commensurate with costs. In the last period the adoption of Network Intrusion Prevention Systems promises to represent an effective line of defense against a variety of attacks that could compromise the security and proper functioning of an enterprise information system. This paper introduces a Network Intrusion Prevention System based on Ontological and Slow Intelligence approach. By the use of Ontology the proposed Network Intrusion Prevention System will analyze the input semantically while will improve over the time sharing knowledge among other similar systems or experts according to the Slow Intelligence approach. A first prototype of the environment has been developed and first experimental results have been showed.