I want to know what is difference between IDS and CIDS. Second if we do research in IDS/CIDS area with machine/deep learning application, experimental results can be achieved with real time scenarios setup or with simulation setup. Also Please list out real time scenarios and simulation examples.
I have some materials on this topic, I will email you.
As I worked a bit in this area, then left for much theoritical background. But hit area for research and dire need of the recent era, so grip it tightly.
Hi Asad Raza
IDS is a mechanism that listens to network traffic stealthily in order to identify abnormal or suspicious activities and thus allow to have a preventive action on the risks of intrusion.
On the other hand CIDS which is first of all an IDS. CIDS employs multiple specialized detectors at the different layers - network, kernel and application - and a manager based framework for aggregating the alarms from the different detectors to provide a combined alarm for an intrusion.
Sometimes, the result obtained through machine learning/deep learning algorithms on IDS datasets are biased when tested against real-time attack scenarios. The accuracy can be checked by simulating the trained model with a real-time environment. On one side the real-time attack can be performed and at another side the trained model can be integrated with platform like SDN to detect the intrusion. SDN can be used to detect anomaly in a network. Similar kind of simulated environment can be created for malware detection, phishing detection.
- Badges
- Science topic