High-performance NIDS Architecture for Enterprise Networking

Abstract

Information technologies progress in various industries cause the development of security technologies, in particular – network intrusion detection systems (NIDS). The authors identified the main features of modern enterprise networks in terms of security and their requirements for NIDS. The paper proposes a new associated graph set (AGS) model of enterprise network for network intrusion detection systems developmentthat meet these requirements. the novelty of the work is in the AGS – model, heterogeneous two-tier NIDS analytics architecture, a method of data collection and an additional method of network data analysis based on AGS.