A model to detect multi-source information attacks

Intrusion detection plays a very critical role in the protection of critical information infrastructures. Although existing intrusion detection systems can easily detect copycat type of attacks, they fail to identify prudent coordinated attacks originating from multiple sources. Therefore, development of a system that can quickly and accurately recognize multi-source attacks is extremely essential for survival of information systems. This research presents a conceptual model to analyze sensor data for detection of coordinated attacks on computer systems. These attacks originate from multiple sites and therefore named as multi-source attacks. Petri-nets are used to detect such attacks. We have implemented the model using C and Visual C+ +.