A taxonomy and survey of intrusion detection system design techniques, network threats and datasets

Hindy, Hanan ORCID logoORCID: https://orcid.org/0000-0002-5195-8193, Brosset, David ORCID logoORCID: https://orcid.org/0000-0002-9677-1445, Bayne, Ethan ORCID logoORCID: https://orcid.org/0000-0003-1853-2921, Seeam, Amar ORCID logoORCID: https://orcid.org/0000-0001-8203-1545, Tachtatzis, Christos ORCID logoORCID: https://orcid.org/0000-0001-9150-6805, Atkinson, Robert ORCID logoORCID: https://orcid.org/0000-0002-6206-2229 and Bellekens, Xavier ORCID logoORCID: https://orcid.org/0000-0003-1849-5788 (2018) A taxonomy and survey of intrusion detection system design techniques, network threats and datasets. arXiv. [Other] (doi:10.48550/arXiv.1806.03517)


With the world moving towards being increasingly dependent on computers and automation, one of the main challenges in the current decade has been to build secure applications, systems and networks. Alongside these challenges, the number of threats is rising exponentially due to the attack surface increasing through numerous interfaces offered for each service. To alleviate the impact of these threats, researchers have proposed numerous solutions; however, current tools often fail to adapt to ever-changing architectures, associated threats and 0-days. This manuscript aims to provide researchers with a taxonomy and survey of current dataset composition and current Intrusion Detection Systems (IDS) capabilities and assets. These taxonomies and surveys aim to improve both the efficiency of IDS and the creation of datasets to build the next generation IDS as well as to reflect networks threats more accurately in future datasets. To this end, this manuscript also provides a taxonomy and survey or network threats and associated tools. The manuscript highlights that current IDS only cover 25% of our threat taxonomy, while current datasets demonstrate clear lack of real-network threats and attack representation, but rather include a large number of deprecated threats, hence limiting the accuracy of current machine learning IDS. Moreover, the taxonomies are open-sourced to allow public contributions through a Github repository. Copyright © 2018, The Authors. All rights reserved.

Item Type: Other
Research Areas: A. > School of Science and Technology > Computer Science
Item ID: 36114
Useful Links:
Depositing User: Amar Kumar Seeam
Date Deposited: 04 Oct 2022 14:44
Last Modified: 16 Nov 2022 17:11
URI: https://eprints.mdx.ac.uk/id/eprint/36114

Actions (login required)

View Item View Item


Activity Overview
6 month trend
6 month trend

Additional statistics are available via IRStats2.