Waleed Bul´ajoul¹, Anne James¹, Siraj Shaikh¹ and Mandeep Pannu², ¹Coventry University, UK and ²Kwantlen Polytechnic University, Canada

Network Intrusion Detection and Prevention Systems (NIDPSs) are used to detect, prevent and report evidence of attacks and malicious traffic. Our paper presents a study where we used open source NIDPS software. We show that NIDPS detection performance can be weak in the face of high-speed and high-load traffic in terms of missed alerts and missed logs. To counteract this problem, we have proposed and evaluated a solution that utilizes QoS, queues and parallel technologies in a multi-layer Cisco Catalyst Switch to increase NIDPSs detection performance. Our approach designs a novel QoS architecture to organise and improve throughput-forwardplan traffic in a layer 3 switch in order to improve NIDPS performance.

Network security, intrusion detection system, network intrusion detection system, open source, Cisco switch configuration & Quality of Service.