A NEW APPROACH TO INTRUSION DETECTION SYSTEM

The design and implementation of intrusion detection systems (IDS) remain an important area of research in the field of security of information systems. Despite the undeniable progress, much remains to be done to improve the security of computer networks today. For this, many mechanisms have been developed {[1], [2]}. In general, these systems are vulnerable to attack from unauthorized users (external attacks) as well as attacks by authorized users (internal attacks) who abuse the privileges granted to them. In this paper, our contribution consists of the design of an intrusion detection system based on security policy at three levels. This approach, very interesting even for complex information systems, allows administrators of information systems and responsibles of network security, the protection from external attacks and internal attacks.