Analysis of Approaches of Monitoring, Intrusion Detection and Identification of Network Attacks
Тамара Радівілова, Lyudmyla Kirichenko, Oleksandr V. Lemeshko, Dmytro Ageyev, Maksym Tawalbeh, Andrii Ilkov · 2020
Information security is an important challenge due to the increasing number of attacks and intrusions. In this paper, approaches and systems for monitoring traffic and events, intrusion detection systems, deep packet inspection tools, and network packet sniffing systems are analyzed. It is shown that for intrusion detection and analysis of illegal actions in the network are used all the many systems and approaches described. A comparative analysis of incident, vulnerability and asset management systems was conducted. Based on this analysis, it is possible to develop recommendations for the use of each system depending on the requirements of the organization.