Abstract:With the recent increase in internet usage, the number of important, sensitive, confidential individual and corporate data passing through internet has increasingly grown. With gaps in the security systems, attackers have attempted to intrude the network, thereby gaining access to essential and confidential information, which may cause harm to the operation of the systems, and also affect the confidentiality of the data. To counter these possible attacks, intrusion detection systems (IDSs), which is an essential branch of cybersecurity, were employed to monitor and analyze network traffic thereby detects and reports malicious activities. A large number of review papers have covered different approaches for intrusion detection in networks, most of which follow a non-systematic approach, merely made a comparison of the existing techniques without reflecting an in-depth analytical synthesis of the methodologies and performances of the approaches to give a complete understanding of the state of IDS. Nonetheless, many of these reviews investigated more about the anomaly-based IDS with more emphasis on deep-learning models, while signature, hybrid-based (signature + anomaly-based) have received minimal focus. Hence, by adhering to the principles of Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA), this work reviewed existing contributions on anomaly-, signature-, and hybrid-based approaches to provide a comprehensive overview of network IDS's state of the art. The articles were retrieved from seven databases (ScienceDirect, SpringerNature, IEEE, MDPI, Hindawi, PeerJ, and Taylor & Francis) which cut across various reputable journals and conference Proceedings. Among the 776 pieces of the literature identified, 71 were selected for analysis and synthesis to answer the research questions. Based on the research findings, we identified unexplored study areas and unresolved research challenges. In order to create a better IDS model, we conclude by presenting promising, high-impact future research areas.

Closing Disparities in Intrusion Detection: An In-Depth Analysis of IDPS Systems

An overview of Intrusion Detection and Prevention Systems

A systematic literature review for network intrusion detection system (IDS)

Understanding Modern Intrusion Detection Systems: A Survey

A Review of Intrusion Detection Systems and Their Evaluation in the IoT

Survey of intrusion detection systems: techniques, datasets and challenges

Efficacy of Attack detection capability of IDPS based on it's deployment in wired and wireless environment

A survey of intrusion detection techniques for cyber-physical systems

A comparison of Intrusion Detection systems

Survey on Intrusion Detection Systems Based on Machine Learning Techniques for the Protection of Critical Infrastructure

Internet of Things intrusion detection systems: a comprehensive review and future directions

A Systematic Literature Review on Host-Based Intrusion Detection Systems

Insights into Modern Intrusion Detection Strategies for Internet of Things Ecosystems

Network intrusion detection system: A systematic study of machine learning and deep learning approaches

Intrusion detection techniques and approaches

Emerging Trends of Recently Published Datasets for Intrusion Detection Systems (IDS): A Survey

A critical review of intrusion detection systems in the internet of things: techniques, deployment strategy, validation strategy, attacks, public datasets and challenges

Safeguarding Smart Horizons: Crafting the Future of IOT Security Through Intrusion Detection and Prevention

Deep Learning Algorithms Used in Intrusion Detection Systems -- A Review

An intelligent intrusion detection system (IDS) for anomaly and misuse detection in computer networks

Intrusion Detection Systems Using Support Vector Machines on the KDDCUP'99 and NSL-KDD Datasets: A Comprehensive Survey