A Review of Intrusion Detection System: Methodology, Classification

An Intrusion Detection System is the process of monitoring events within a computer network and analyzing them for unusual behavior. Moreover, IDS detects attempts at misuse, whether by authorized users or external parties who seek to abuse privileges or exploit security vulnerabilities. Computer intruders, who can be found across the internet, pose a significant threat, making it challenging to ensure that information systems are secure and maintained in a safe state throughout their lifetime and use. Intrusion Detection Systems can be software or hardware products designed to monitor system usage and identify any signs of an insecure state. This paper aims to review the methodology of intrusion detection systems and their classifications, summarizing the advantages and disadvantages of the most used approaches.