Hybrid Intrusion Detection System

Abstract

Intrusion Detection Systems (IDS) is a security system that acts as a protection layer to the infrastructure. Throughout the years, The IDS technology has grown enormously to keep up with the advancement of computer crime. Since the beginning of the technology in mid 80’s, researches have been conducted to enhance the capability of detecting attacks without jeoparding the network performance. An intrusion detection system (IDS) provides a layer of defense which monitors network traffic for predefined suspicious activity or patterns, and alert system administrators when potential hostile traffic is detected. Intrusion detection faces a number of challenges; an intrusion detection system must reliably detect malicious activities in a network and must perform efficiently to cope with the large amount of network traffic. IDS can be a piece of installed software or a physical appliance. Many IDS tools will also store a detected event in a log to be reviewed at a later date or will combine events with other data to make decisions regarding policies or damage control. In this paper, we are going to study about the different types of IDS, basically NIDS and HIDS, their strengths and weaknesses and the advantages that we can obtain by combining both of them.