Implementação De Funcionalidade Preventiva Em Um Sistema De Detecção De Intrusão Inteligente / Implementation of Preventive Functionality in an Intelligent Intrusion Detection System

Abstract

The intrusion prevention in computing environments is a recurring concern for network administrators. This article presents an automation solution for IIDS (Intelligent Intrusion Detection System), or proposes the transformation of an IIDS in a IIDPS (Intelligent Intrusion Detection Prevention System). The IIDPS besides to detect and report the existence of an attack, it acts proactively to prevent the attack. To actualize this transformation has developed a function that performs the integration of the IISD and the iptables firewall. This function receives as parameter the detection performed by the IISD and then executes a firewall command.