Network Security White Papers

Generating Realistic Workloads for Network Intrusion Detection Systems

Overview While the use of network Intrusion Detection Systems (nIDS) is becoming pervasive, evaluating nIDS performance has been found to be challenging. The goal of this study is to determine how to generate realistic workloads for nIDS performance evaluation. A workload model is developed that appears to provide reasonably accurate estimates compared to real workloads. The model attempts to emulate a traffic mix of different applications, reflecting characteristics of each application and the way these interact with the system. This model is implemented as part of a traffic generator that can be extended and tuned to reflect the needs of different scenarios. This paper presents an approach to measuring the capacity of a nIDS that does not require the setup of a full network testbed.

Further White Paper Details
PublisherFoundation for Research and Technology - FORTH File FormatPDF
Date PublishedNovember 2003
FormatWhite Papers   
Topics

Quick Sitemap Links: