The rapid advancement of information technology, along with the continuous growth in the volume and diversity of network traffic, has led to a sharp increase in the number of cyber attackers, making the implementation of intrusion detection and intrusion prevention systems (IDS/IPS) essential for both public and private sector organizations. However, budget limitations often present a significant obstacle, rendering commercial IDS/IPS solutions inaccessible for many institutions. In response to this issue, this study undertakes a comparative analysis of two open-source systems, namely Snort and Suricata. This research seeks to evaluate their effectiveness in real-world scenarios and provide insights into optimal system configuration. The comparative results are intended to inform system selection decisions and guide practical implementation strategies. Moreover, the research integrates the use of artificial intelligence (AI)-based software tools to analyze log files generated during system testing. This approach demonstrates significant advantages, including reduced analysis time and improved operational efficiency. The outcomes of this study are expected to provide practical value to network security professionals and academic researchers by offering actionable insights, real-world data, and a technical foundation for informed decision-making in the field of network security [1].

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Study on the Use of Artificial Intelligence in Open-Source Intrusion Detection and Prevention Systems

  • Enkh-Od Erdene,
  • Uranchimeg Tudevdagva,
  • Dashdorj Yamkhin,
  • Zheng Rui

摘要

The rapid advancement of information technology, along with the continuous growth in the volume and diversity of network traffic, has led to a sharp increase in the number of cyber attackers, making the implementation of intrusion detection and intrusion prevention systems (IDS/IPS) essential for both public and private sector organizations. However, budget limitations often present a significant obstacle, rendering commercial IDS/IPS solutions inaccessible for many institutions. In response to this issue, this study undertakes a comparative analysis of two open-source systems, namely Snort and Suricata. This research seeks to evaluate their effectiveness in real-world scenarios and provide insights into optimal system configuration. The comparative results are intended to inform system selection decisions and guide practical implementation strategies. Moreover, the research integrates the use of artificial intelligence (AI)-based software tools to analyze log files generated during system testing. This approach demonstrates significant advantages, including reduced analysis time and improved operational efficiency. The outcomes of this study are expected to provide practical value to network security professionals and academic researchers by offering actionable insights, real-world data, and a technical foundation for informed decision-making in the field of network security [1].