Hello

I want to develop Network Intrusion detection system in java programming for network security. Based on Pattern matching and anomaly based......
Can any body help me regarding this ...........
Plz tell me links and any concept for this in java.....
How should i start it??????

This post has been edited by inderp10: 19 Sep, 2008 - 02:02 AM

Hi


I want to develop Network Intrusion detection system in java programming .......
Based on Pattern matching and Anomaly based.....
Can any body help me.............?
Give the concepts ......and advice in this,,.....
thks

This looks like more of a "help me out" than "let's discuss this project" kinda thread, so I'm gonna move it to Java.

I dunno how well you know the concepts of pattern matching but basically if you have two arrays containing identical data although in different order, you have a case where you can apply pattern matching.

One way is to count inversions, if you have arrays [1234] and [2314] where the first is your reference, you count the inversions in the second array compared to the first. A quick way to do this is to use some divide and conquer method like merge and count.

Now the problem is when searching for anomalies that the user won't just do input that can be matched directly to your pattern. The user can do pretty much anything. So you need to assign weights, where doing things in a different order is 'cheaper' than doing something completely unexpected. I guess you'll have to implement this with some dynamic programming algorithm and regression analysis.

You also need to define what you consider normal and what is an anomaly.

Do you have any plan so far? This is a rather big project and all projects need careful planning. What is it that you plan to compare to find anomalies?

This post has been edited by Gloin: 19 Sep, 2008 - 06:27 AM

I love Java, my favorite language, but won't write a Network Intrusion System in it.
There are to many low level OS stuff for which you will need native system code.

I agree on that. Also because Java handles alot of action behind the screen and you have no idea what it does, anything could be a security hole waiting to be opened.
When you make a program to handle security you want to be able to manage memory directly. Try C instead.