Abstract:Cyber threats are increasing not only in their volume but also in their sophistication and difficulty to detect. Attacks have become a national/global threat as they have targeted private and public, as well as government sectors over the years. This is a growing issue and organisations are taking steps to reduce, detect and prevent threats. To do this they need to use systems that are equipped with the capabilities to do either of those steps and develop them for the type of networks they use, for instance wired or wireless. One of these systems are Intrusion Detection Systems (IDS), which can be used as the first defence mechanism or a secondary defence mechanism of a threat or an attack. There are different types of attacks that can occur in a network, such as Denial of service (DoS)/Distributed Denial of Service (DDoS), port scanning, malware or ransomware and so forth that IDSs have a capability of detecting. Assisting in the mitigation of such attacks, there are also Intrusion Prevention Systems (IPS) whose role has a different purpose than that of IDSs. Unlike IDSs they not only detect threats but prevent them from disrupting the network, IPSs can be used in conjunction with IDSs to double the defences. This paper provides an overview of IDS and their classifications and IPS. It will detail typical benefits and limitations to using IDSs, IPSs and the hybrids (such as Intrusions Detection Prevention Systems (IDPSs and more)) which will be discussed further. It will also outline developments in the making using ML and how it is used to improve these systems and the dilemmas they produce and possible ways to counter act them.

An overview of Intrusion Detection within an Information System: The Improvment by Process Mining

Study of Adaptive Intrusion Detection with Data Mining

Research on Data Mining-based Intrusion Detection in Real-time Environment

Process Mining Algorithm for Online Intrusion Detection System

Data Mining with Big Data in Intrusion Detection Systems: A Systematic Literature Review

Survey of Network Intrusion Detection Methods from the Perspective of the Knowledge Discovery in Databases Process

Research on Network Intrusion Detection Based on Data Mining

Applications of data mining to network intrusion detection

Intrusion detection techniques and approaches

High-Level Event Mining: Overview and Future Work

New method for intrusion features mining in IDS

Research on Principle Techniques for Network Intrusion Detection Based on Data Mining and Analysis Approach

A distributed platform for intrusion detection system using data stream mining in a big data environment

Intrusion detection techniques in network environment: a systematic review

Security in Process: Detecting Attacks in Industrial Process Data

Intrusion Detection A Text Mining Based Approach

An overview of Intrusion Detection and Prevention Systems

New algorithm mining intrusion patterns

Extraction, correlation, and abstraction of event data for process mining

Imposing Rules in Process Discovery: an Inductive Mining Approach

Understanding Modern Intrusion Detection Systems: A Survey