Detection of Malicious Activities by Smart Signature-Based IDS
Ramya Chinnasamy, Malliga Subramanian · 2023
An intrusion detection system (IDS) can be utilized to improve the security of the computing system and corresponding network. Computing systems’ basic security requirements such as confidentiality, integrity, and availability are met by IDSs. A signature-based intrusion detection system (SIDS) is a kind of IDS that identifies known threats using pattern-matching techniques. Generally, a SIDS triggers an alarm signal if the signature of the current message matches with the malicious signature stored in the attack signature database. If SIDS employs artificial intelligence to detect the attack, it is known as a smart signature-based intrusion detection system. This chapter elaborates on SIDS with the details such as (i) definition of SIDS, (ii) flow diagram of SIDS, (iii) classification, (iv) signature structure, (v) various smart signature detection methods, and (vi) performance measures and summary of the chapter.