Network Intrusion Detection via Distributed Virtual Switch Fabric
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network intrusion detection systems (NIDS) require significant human intervention for configuration and maintenance, especially in complex networks, and can only notify administrators of intrusions, leading to delays in response times and potential network vulnerabilities.
Innovation Solution
A network intrusion detection system (NIDS) that integrates with a distributed virtual switch fabric to autonomically adjust to hardware changes and take immediate automated actions, eliminating the need for manual configuration and reducing response times by accessing network information through a virtual view of all networking devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Manufacturing precision
If manual configuration of NIDS is used, then configuration accuracy is improved, but device complexity and time consumption increase significantly
Solution Approach 1:
The NIDS automatically discovers network topology by interrogating the bridge on the distributed virtual switch fabric, eliminating the need for manual configuration. The system serves itself by autonomously gathering network information and configuring itself without human intervention.
Solution Approach 2:
The patent replaces manual mechanical configuration processes with automated electronic interrogation of the bridge. Instead of administrators manually configuring NIDS, the system electronically queries network information from the bridge to automatically discover topology and configure itself.
2Manufacturing precision
If manual configuration of NIDS is used, then configuration accuracy is improved, but loss of time increases significantly
Solution Approach 1:
The NIDS automatically discovers network topology by interrogating the bridge on the distributed virtual switch fabric, eliminating the need for manual configuration. The system serves itself by autonomously gathering network information and configuring itself without human intervention.
Solution Approach 2:
The bridge on the distributed virtual switch fabric maintains network topology information in advance, so when the NIDS needs to be configured, the information is already available. This preliminary preparation eliminates the need for time-consuming manual discovery processes.
3Ease of operation
If NIDS only notifies administrators, then ease of operation is improved, but response speed and security effectiveness worsen
Solution Approach 1:
The system dynamically adapts its response mechanism based on the detected intrusion type and severity. For critical intrusions, automated service actions are triggered immediately. For less severe cases, notification to administrators is provided. This dynamic approach balances operational simplicity with rapid response needs.
Solution Approach 2:
The NIDS automatically executes service actions to neutralize detected intrusions without requiring administrator intervention. The system serves itself by autonomously responding to security threats, eliminating the delay between detection and response that would occur with manual administrator action.
4Manufacturing precision
If NIDS is manually updated for network changes, then accuracy is improved, but productivity and time efficiency worsen
Solution Approach 1:
The NIDS continuously monitors network changes through the bridge and receives feedback about topology modifications. When changes are detected, the system automatically updates its configuration to reflect the new network state, ensuring continued accurate detection without manual intervention.
Solution Approach 2:
The NIDS automatically discovers network topology by interrogating the bridge on the distributed virtual switch fabric, eliminating the need for manual configuration. The system serves itself by autonomously gathering network information and configuring itself without human intervention.
Data Source
AI summary
A network intrusion detection system (NIDS) works in conjunction with a distributed virtual switch fabric to provide enhanced network intrusion detection in a way that does not require as much human intervention, autonomically adjusts to hardware changes in the network, and responds much more quickly than known network intrusion detection systems. The NIDS accesses network information from the distributed virtual switch fabric, which gives the NIDS access to a virtual view that includes hardware information for all networking devices in the network. This allows the NIDS to automatically determine network topology, update itself as hardware in the network is added or changed, and promptly take automated service actions in response to detected network intrusions. The result is a NIDS that is easier to configure, maintain, and use, and that provides enhanced network security.