آیا می‌دانستید؟

My Thesis>> Analysis and evaluation of intrusion detection systems test methods

My Thesis>> Analysis and evaluation of intrusion detection systems test methods

By: Amiri

Supervisor: Dr. Amir Hossein Jahangir

January 2017

Keywords (5 to 7 keywords): Intrusion Detection System Evaluation, Performance, IDS, IPS, Attack Coverage, CVSS, Network Security, Attack Detection Test

Intrusion detection systems’ test and evaluation is an active research area on which many researchers have been working for years. A complete and comprehensive test methodology that can be applied in reasonable time and cost is important and useful both to evaluate a newly designed system and to compare two or more existing systems to select an appropriate system for a particular network. In this research, we first determine the critical features of an IDS and then inspect methods and effective parameters that may influence the test process and propose a method for testing intrusion detection systems. In the proposed test methodology we only examine critical features which lake of them cause serious disorder in the system. To evaluate the results of the attack detection test from various systems, we propose a method based on CVSS and attack tree that can adapt to a destination network, in proposed evaluation method we assign a score to each attack, in the calculation of this score we consider attack damage and vulnerable platform utilization in the network. As the commercial test tools are quite expensive and free tools are usually not complete and do not help evaluating test results, we designed and implemented a tool for test and evaluation of intrusion detection systems based on proposed method. Finally, we compared it with the existing tools.

Download link-Persian (ASAP)

من و شریف

لحظه به لحظه،  روز به روز چه سریع گذشت، دو سال و نیم تمام شد و من به لطف قانون رایگان بودن ترم پنج برای دانشجویان متاهل به رایگان تمدید کردم و در روزهای آخر ترم موفق شدم از پایان‌نامه‌ام دفاع کنم (در پست بعدی خلاصه پایان‌نامه‌ام را قرار خواهم داد).

این آخرین ترم تحصیلیم در دانشگاه شریف بود، شریفی که اسمش از خودش بزرگتره، اما نمی‌دانم من شایسته‌اش بودم یا نه؟ هر چند تمام سعی‌ام را کردم که موضوع پایان‌نامه‌ام کاربردی باشد و در این راه به مشکلاتی هم بر خوردم اما خداروشکر تمام شد و ان‌شاالله قرار است در آزمایشگاه شبکه از پایان‌نامه‌ام برای تست تجهیزات امنیتی استفاده شود.