Advancements in Intelligent Systems
Securing Networks with Precision: Unveiling the Potential of Application Protocol Based Intrusion Detection Systems
Authors: Shivani Karthikeyan, Shrish K S, Arunkumar J and Bagavathi C
Publishing Date: 02-01-2025
ISBN: 978-81-975670-3-2
Abstract
Intrusion detection systems (IDS) are crucial for network security, detecting and preventing unauthorized activities. This paper examines the effectiveness of IDS like Snort, Suricata, and Bro in analyzing network traffic and identifying anomalies across various application layer protocols such as DNS, SSH, FTP, SMTP, SNMP, and HTTPS. Each protocol poses unique challenges due to specific vulnerabilities, requiring IDS to utilize a mix of behavioral analysis, signature-based detection, and content inspection. Advanced techniques are essential for handling encrypted traffic in HTTPS and identifying threats in SMTP and DNS communications. The paper compares different IDS types— Network-Based, Host-Based, Protocol-Based, Application Protocol-Based, and Hybrid IDS—emphasizing the specialized protection offered by APIDS for application layer protocols. The integration of multiple IDS types enhances defense capabilities, underscoring the effectiveness of hybrid approaches for comprehensive threat management.
Keywords
Intrusion Detection System, Cybersecurity, Cyber-attacks.
Cite as
Shivani Karthikeyan, Shrish K S, Arunkumar J and Bagavathi C, "Securing Networks with Precision: Unveiling the Potential of Application Protocol Based Intrusion Detection Systems", In: Chetan Sharma, Vaishali Maheshwari and Harish Sharma (eds), Advancements in Intelligent Systems, SCRS, India, 2025, pp. 45-69. https://doi.org/10.56155/978-81-975670-3-2-5