A novel network intrusion prevention system based on Android platform. Issue 2 (3rd July 2021)

• Record Type: Journal Article
• Authors: Chen, Guanlin; Zhou, Kunlong; Peng, Yubo; Zhou, Liang; Zhang, Yong
• Is Part Of: International journal of internet protocol technology. Volume 14:Issue 2(2021)
• Page Start: 67
• Page End: 76
• Publication Date: 2021-07-03
• Subjects: Wi-Fi -- intrusion prevention system -- intrusion intent -- Android -- TcpDump; File Transfer Protocol (Computer network protocol) -- Periodicals; Multicasting (Computer networks) -- Periodicals; 004.678
• Languages: English
• ISSNs: 1743-8209

Abstract

With the popularity of wireless networks in recent years, the mobile phone users accounted for 95.1% in China. Meanwhile, the security issues cannot be ignored. The cost of wireless attacks is getting lower, and there are more frequent occurrence of wireless fishing, wireless crack and other security events. However, the current traditional intrusion prevention method can only cope with relatively simple attack scenarios. Therefore, the development of new intrusion prevention system is particularly important. In this paper, we design and implement a novel network intrusion prevention system, which uses VpnService and TcpDump to capture traffic as a data source, cooperates with the single-step attack rule signature database and the attack chain signature database to perform real-time intrusion detection, and combines intent analysis to detect intrusion intention-behaviour and output alarms. The results show that the system is effective in recognising typical wireless attacks.