Applying a security architecture based on Distributed Intrusion Detection System for Broadband Convergence Network
Tran Hoang Hai, Seung‐Yeon Lee, Eui‐Nam Huh, Sungwon Sohn, Taekyong Nam · 한국인터넷정보학회 학술발표대회 논문집 · 2006
In this article, we propose a security architecture based on DOMINO for the Broadband Convergence Network (BCN). The new architecture enhances security and QoS for the BCN by placing a DIDS on top of existing networks on the core backbone network. Overlay technique fosters security information collaboration among heterogeneous networks via overlay technique. We also present the methods of sharing security data in a single network and between the networks in the BCN. This architecture enables the BCN to be robust of attacks and failures, controls data traffic going in and out the backbone core through IP edge routers integrated with an IDS.