Low-end embedded Linux platform for network security application - Port scanning detector

Abstract

The purpose of this paper is to realize possible usage on embedded Linux platform for Intrusion Detection (Port Scan Detection). The approach was to develop the software which performs port scan using half-open and udp technique. The software is then executed on Linux based Single Board Computer (SBC) where run TS-Linux 2.4.23 kernel. Results show that the Embedded Port Scan Detector (EPSD) unit managed to be at par with the other known port scanning software, besides running on relatively low-end embedded platform. Hence, it is significant that the product has a very high market potential. Our test of the new system brings up satisfactory results for port scan detect activity under such hardware limitations.