IDSVL: Intrusion Detection System Virtual Lab based on component in the Internet

Abstract

This paper proposed the design model and implementing method of IDSVL (Intrusion Detection System virtual lab system) based on component technique. IDSVL system is implemented with Java language, which makes it independent of operating system, In IDSVL system, all IDS modules, which includes data generator module, event generator module, analyzer module statistic and displaying module and management module, are developed with Java Bean so that it is scalable and gets good performance in software reuse. The client of IDSVL system is implemented with Java Applet, users can not only set the experiment flow visually but also choose the type of simulation attack streams, configure filter rules and detection rules, set the display mode of experiment result. In the whole process of experiment, users participate in configuration and operation of IDS intuitively and this is helpful for the users to understand and master the structure and theory of IDS. © Springer-Verlag Berlin Heidelberg 2006.