An Approach to Mitigate Malware Attacks Using Netfilter's Hybrid Frame in Firewall Security

With the steady advancements in the technology, the network security is really important these daystoprotectinformationfromattackers.Inthisresearch,themainfocusisondesigningstrong firewallfilteringrulessothatdetectionofmaliciouscodeisachievedtoanoptimallevel.Aproposed frameworkisintroducedtoimprovetheperformanceparameterssuchasServerresponsetime,Web contentanalysis,Bandwidth,andtheperformanceoftheNetworktrafficload.Thisresearchwork definesanewsetofIPtablerulesachievedbymodifyingthekernelsourcecode.Thisisdoneusing OpenBSDkernelsourcecode,whichresultsintheformationofamini-firewall.Therefore,anew hybridapproachisproposedbyaddingpacketfilteringrulesandSNORTtechnologyinmini-firewall formaliciousactivitydetection.Itisanefficientandpracticaltechniquewhichwillbehelpfulto mitigate the malware attacks and secure LAMP server. Experimental analysis has been done to concludethataround70-75%maliciousactivitycanbereducedbyusingtheproposedtechnique. KeywORdS Attack Mitigation, Deep Packet Inspection, Distributed Denial of Service, Information Security, Intrusion Detection System, Packet Filtering Rule Editor