A novel hybrid-based approach of snort automatic rule generator and security event correlation (SARG-SEC).

ABSTRACT: The rapid advanced technological development alongside the Internet with its cutting-edge applications has positively impacted human society in many aspects. Nevertheless, it equally comes with the escalating privacy and critical cybersecurity concerns that can lead to catastrophic consequences, such as overwhelming the current network security frameworks. Consequently, both the industry and academia have been tirelessly harnessing various approaches to design, implement and deploy intrusion detection systems (IDSs) with event correlation frameworks to help mitigate some of these contemporary challenges. There are two common types of IDS: signature and anomaly-based IDS. Signature-based IDS, specifically, Snort works on the concepts of rules. However, the conventional way of creating Snort

SUBMITTER: Jaw E 

PROVIDER: S-EPMC9044335 | biostudies-literature | 2022

REPOSITORIES: biostudies-literature