Host Based Internal Intrusion Detection System by Using Data Mining

We can use different ways to authenticate users like password. Intrusion may occurs from different types of attacks on the system. Insider attackers, the valid users of a system who attack the system internally, are hard to detect since most intrusion. we use firewall system and different intrusion detection system to prevent that types of attack. Therefore, in this a security system, named the Internal Intrusion Detection and Protection System (IIDPS), is proposed to detect insider attacks by using data mining and forensic techniques used for forensic profiling. In IIDPS first we analyses different types of activity of the user which is known as basic activity and create user profile of the user. After that system create attacker log file and comparing both the files. If files are matched then alert is not send alert otherwise send alert. In IIDPS evidence are collecting against attacker by capturing images of the user using web camera in the system.