International Science Community Association Research Journal of Engineering Sciences 2278 - 9472 1 1 2012 07 26 Intrusion Detection and Prevention System (IDPS) Technology- Network Behavior Analysis System (NBAS) 51 56 EN D.P Deshpande 1 Dept of Chemical Engineering, TKIET, Warananagar, MS, INDIA S.S. Haral 2 Dept. of Chemical Engineering, Govt. Polytechnic, Jalna, MS, INDIA S.S. Gandhi 3 Dept of Chemical Engineering, MIT, Alandi, Pune, MS, INDIA V.N. Ganvir 4 Dept, of Petrochemical Technology, LIT, Nagpur, MS, INDIA Vaibhav V. Prakash 1 Department of Computer Science and Engineering, Sri Jayachamarajendra College of Engineering, Mysore, INDIA Kutnikar Ajay L. 2 Department of Computer Science and Engineering, Sri Jayachamarajendra College of Engineering, Mysore, INDIA Tushar S. Patel 1 Computer Engineering Department, UVPCE, Kherva, Gujarat, INDIA Kiran R. Amin 2 Computer Engineering Department, UVPCE, Kherva, Gujarat, INDIA U.C. Roman 1 Sardar Vallabhai National Institute of Technology, Surat 395007, INDIA P.D. Porey 2 Sardar Vallabhai National Institute of Technology, Surat 395007, INDIA P.L. Patel 3 Sardar Vallabhai National Institute of Technology, Surat 395007, INDIA N. Vivekanandan 4 Central Water and Power Research Station, Pune 411024, INDIA Sanjay Purkar T. 1 Swami Vivekanand College of Engineering, Indore MP, INDIA Sunil Pathak 2 Swami Vivekanand College of Engineering, Indore MP, INDIA Sanjay Kumar Dubey 1 Dept. of Civil Engineering, Jabalpur Engineering College, Jabalpur INDIA Ahmad Khaleek 1 Structural Engineering, Jabalpur Engineering College, Jabalpur, MP, INDIA R.K. Yadav 2 Department of Civil Engineering, Jabalpur Engineering College, Jabalpur, MP, INDIA Rajeev Chandak 3 Department of Civil Engineering, Jabalpur Engineering College, Jabalpur, MP, INDIA M.P. Aina 1 Lab. des Sciences et Techniques de l’Eau de l’Ecole Polytechnique d’Abomey Calavi, UAC, Cotonou, BENIN and Lab. d’Etude et de Recherche en Chimie Appliquée, Ecole Polytech. d’Abomey/Calavi, UAC, Cotonou, BENIN B. Djihouessi 2 Lab. des Sciences et Techniques de l’Eau de l’Ecole Polytechnique d’Abomey Calavi, UAC, Cotonou, BENIN E.W. Vissin 3 Lab. Pierre Pagney, Climat, Eau, Environ., Dévelopement (LACEEDE) /DGAT/FLASH, Université d’Abomey-Calavi, BENIN N.M. Kpondjo 4 Lab. des Sciences et Techniques de l’Eau de l’Ecole Polytechnique d’Abomey Calavi, UAC, Cotonou, BENIN V. Gbèdo 5 Lab. des Sciences et Techniques de l’Eau de l’Ecole Polytechnique d’Abomey Calavi, UAC, Cotonou, BENIN K.C.D Sohounhloué 6 Lab. d’Etude et de Recherche en Chimie Appliquée, Ecole Polytech. d’Abomey/Calavi, UAC, Cotonou, BENIN Nitin Tiwari 1 Singhania University, Jhunjhunu, Rajasthan, INDIA Rajdeep Singh Solanki 2 Singhania University, Jhunjhunu, Rajasthan, INDIA Gajaraj Singh Pandya 3 Singhania University, Jhunjhunu, Rajasthan, INDIA > Research Paper 2012 7 11 2012 07 26 Intrusion detection is the process of monitoring the events occurring in a computer system or network and analyzing them for signs of possible incidents, which are violations or imminent threats of violation of computer security policies, acceptable use policies, or standard security practices. Intrusion prevention is the process of performing intrusion detection and attempting to stop detected possible incidents. Intrusion detection and prevention systems (IDPS) are primarily focused on identifying possible incidents, logging information about them, attempting to stop them, and reporting them to security administrators. In addition, organizations use IDPSs for other purposes, such as identifying problems with security policies, documenting existing threats, and deterring individuals from violating security policies. IDPSs have become a necessary addition to the security infrastructure of nearly every organization. In this paper we discuss the one technology of IDPS named network behavior analysis system. A network behavior analysis system (NBAS) is basically an IDPS (intrusion detection and prevention system) technology which examines network traffic to identify threats that generate unusual traffic flows, such as distributed denial of service (DDoS) attacks, certain forms of malware, and policy violations, In this paper we provides a detailed discussion of NBA technologies. First, it covers the major components of the NBA technologies and explains the architectures typically used for deploying the components. It also examines the security capabilities of the technologies in depth, including the methodologies they use to identify suspicious activity. The rest of the part discusses the management capabilities of the technologies, including recommendations for implementation and operation. Copyright@ International Science Community Association