Development of host based intrusion detection system for log files
Firkhan Ali Bin Hamid Ali, Yee Yong Len · 2011
Nowadays, computer security has become important issue in many organizations in this world. There are many ways to handle this issue including by using Intrusion Detection System on the computer system. It takes the role as a detector for any intrusion that is occurring from the computer system. The study is to develop host based intrusion detection system for Microsoft Windows XP environment. Method that had used in the study was applying intrusion detection pattern matching technique on the Security Event Log File for Microsoft Windows XP. The intrusion had identified when there was matching of intrusion pattern that is create with Security Event Log in Microsoft Windows XP. The system is hoping to evolve into IDS that include any kind of intrusion detection technique in future.