QUALITY OF SERVICE OF SIGNATURE BASED INTRUSION DETECTION SYSTEM

Abstract

The intrusion detection systems come loaded with a set of pre-defined signatures; for the majority of organizations these are insufficient, and, even worse, organizations have limited or no time to deal with these suspicious activities, so they often go unattended. Signature-based IDS work by comparing network traffic and system activity against a database of known attack signatures to detect and block malicious traffic. The aim of this research is to evaluate and highlight limitations of signature based IDS. This review paper is primarily aimed to assist researchers by classifying attacks/vulnerabilities of SIDS. The method of attacks and relevant countermeasures are provided for each kind of attack in this work. The pros and cons of different techniques are also discussed. Furthermore, challenges and recommendations are presented in this work.