A categorical survey of state-of-the-art intrusion detection system-Snort. (6th May 2020)

• Record Type: Journal Article
• Authors: Gupta, Alka; Sharma, Lalit Sen
• Is Part Of: International journal of information and computer security. Volume 13:Number 3/4(2020)
• Page Start: 337
• Page End: 356
• Publication Date: 2020-05-06
• Subjects: keywords-network intrusion detection system -- parallel architecture -- Snort -- signature-based -- pattern-matching -- HIDS -- NIDS; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1744-1765

Abstract

Internet has shown a tremendous growth in the last few years and along with it, the impact, quality and quantity of threats on it have also increased. Organisations are striving to find methods to protect their data and network from the existing and emerging threats. Defence and monitoring system have become an essential part of all organisations who want to secure their data against network threats. This paper presents a categorical survey on the various research techniques taken for improving the performance of open-source intrusion detection system, Snort – de facto in the field of intrusion detection and prevention. The pros and cons of all the techniques have been presented. A novel parallel architecture has been proposed to increase the performance of Snort -IDS in a high speed network. The architecture is based on the constituent protocol proportions of the network traffic.