Design and implementation of an intrusion detection system

Abstract

With the rise of the internet in recent years, the number of users has greatly increased. The Internet serves countless personal and professional needs for individuals and societies. However, this interconnection of computers also allows malicious users to use these resources for malicious purposes, exposing current computer networks to an increasing number of security threats, with new types of attacks appearing continuously and increasing in number, severity and impact. One of the most important attacks is the zero-day attack, which occurs on the same day that a weakness is detected in a software. This weak point is exploited before a patch by the creator of the software, so their signature is unknown in this moment by security software manufacturers. For These reasons, network administrators are looking for effective security solutions that can protect the company’s network. In this context, the IDS(Intrusion Detection System) is a good solution for the protection of computer networks.