Security architecture testing using IDS - a case study

Many security approaches are currently used in organisations. In spite of the widespread use of these security techniques, network intrusion remains a problem. This paper discusses some of the fundamental shortcomings present in access control, cryptography, intrusion detection and firewall technologies. It then presents a security verification technique combining intrusion testing with intrusion detection, and includes a detailed case study of this technique in practice. Finally we propose a hybrid firewall/intrusion detection framework aimed at mitigating some of the issues raised as well as describing a system to facilitate automated response.

• Type: Journal
• Year: 2002
• Where: COMCOM
• Authors: Theuns Verwoerd, Ray Hunt
• Keywords: COMCOM 2002, Intrusion, Intrusion Detection, Many Security Approaches