Towards the development of an effective intrusion detection model
Sarathiel Chaipa, Mariki M. Eloff, Mariki M. Eloff · 2017
Intrusion detection systems (IDSs) are an important component of information security. The challenge with current versions has be en the high numb er of fa lse positive and f alse negative alerts they generate. The aim of this paper is the analysis of current intrusion detection systems and the Common Intrusion Detection Framework (CIDF) model for any weaknesses through a detailed literature review. The result is a proposed model which addresses these weaknesses. The weaknesses are ad dressed through the inclusion of data r eduction algorithms in e very component which is seen as key to reducing the amount of data being processed or analysed by the proposed IDS model, thereby increasing the processing speed. The introduction of a parallel analysis process which employs misuse-, anomaly — and specification-based detection approaches may also e nhance the detection accuracy of the proposed model. The paper concludes with a call to the IDS develo pment community to try out the proposed model.