5 replies to this topic

[it_is_pavan]

HI I am pavan kumar doing my final year project.can u pls help me on network based intrusion detection.Pls i kindly request u because i dont have much time

[WingedPanther]

What type of algorithms are you intending to implement?

[it_is_pavan]

WingedPanther said:

What type of algorithms are you intending to implement?

Hey i actually i dont understand how to implement this project.But what i can say is that i am good at java......more over i m ready to work for atleast 8-10hrs a day but i need to complete the proj in 15 days.So,i kindly request you to guide me in this aspect.So reply me as early as possible

[WingedPanther]

Java wouldn't be my first choice of language for this. Java isn't real good at packet sniffing, though it could monitor logs from other utilities.

The first thing you'll need to understand is how to detect network intrusion, what traces it leaves, and what tools are appropriate for it. You'll also need to know the OS.

[it_is_pavan]

WingedPanther said:

Java wouldn't be my first choice of language for this. Java isn't real good at packet sniffing, though it could monitor logs from other utilities.

The first thing you'll need to understand is how to detect network intrusion, what traces it leaves, and what tools are appropriate for it. You'll also need to know the OS.

ok fine.....can we start implement the project please specify me what what code i should write because i dont have time..................if u have code please send me i will check it once...........I will not copy urs but i will try to reimplement urs.Please help me i dont have time....

[WingedPanther]

I have no code (I hate networking, in general). I'm trying to tell you that you need a STRATEGY first. You cannot DETECT a network intrusion until you know how to DESCRIBE a network intrusion. Once you can describe it, then you need an algorithm to detect it. What I'm trying to tell you is that you're approaching this wrong, and I want to help you approach the problem correctly. We don't just hand out code here, and your problem is so broad that anything that isn't pure garbage would be worthless.

You may want to look at SELinux as a chunk of code that could give you ideas. Ultimately, it's about monitoring traffic, and detecting inappropriate traffic.