Abstract

Like oil and gas reserves, information is one of organization's most vital resources. Whether this data is used upstream for exploration and production activities, or downstream for refining and distribution, data is crucial to operations. In today's marketplace, reliable access to information- from geophysical to drilling, from transport to refining- is important in obtaining maximum value from assets and is key of sustaining global competitive advantage. As a solution of securing data intrusion detection system is used to better manage data and information workflow. These Intrusion Detection Systems detect attacks by capturing and analyzing network packets. In this paper Semi-automated Intrusion Detection System is proposed which is a new way to identify intrusion characteristics. The key techniques used here are sensing audit and syslog data analysis, generating response, database management, and generating report. The functional components are logging host and IDS server. The logging host is used for sensing log data, generating local response, and sending sensed records to IDS server and the IDS server is used for generating global response and report based on query given by system administrator.