A Distributed IPS Model Based on Neighbor Distance

The efficient cooperative countermeasure against a large-scale attack is very crucial for current networks. This paper proposed an approach of cooperation based on Neighbor Distance (ND) for enhancing the performance of the distributed Intrusion Prevention System (IPS). In the model, message types transmitted between cooperation nodes are defined, and a message-based cooperation method is adopted and enhances the flexibility for system deployment. In order to reduce the redundant message, the distance between nodes is calculated and the communication region is optimized in the model, and the message distribution strategy is showed. The experimental result shows that the model decreases the IPS network load evidently.