Survey on Intrusion Detection Systems (original) (raw)

Intrusion detection systems (IDSs) play an important role in the defense of the companies’ IT systems. These systems provide automated protection against a variety of attacks and intrusions. Without them in several cases system administrators are not able to recognize in time high degree attacks and thus effective defense and intervention actions cannot be taken. IDSs use sensors to detect potential attacks and they either inform system administrators or intervene automatically when an attack signature is recognized. In this paper, we do a survey on the main families of IDSs presenting their classification and the advantages and disadvantages of the different approaches.