It is not trivial to determine the optimal configuration of an IDS because of the need to understand the quantitative relationships between a wide range of analyzers and tuning parameters.įig. Each IDS also comes with a default configuration to use when no additional information or expertise is available. The current version of the Snort IDS, for example, has approximately 10,000 signature rules located in 50 categories.

The configuration of IDSs is not a trivial task. A configuration providing high information assurance can result in significant delays for control system applications since a large number of signatures have to be checked for each incoming packet. The C–A and S–C delays depend on the configurations of the IDSs. IDS signatures have been developed for most published vulnerabilities and for potentially dangerous activity in common IT protocols. They are passive devices that receive and evaluate information sent over a network against a set of signatures.

IDSs are deployed in communication networks for detecting unauthorized system access. Mahmoud, Yuanqing Xia, in Networked Control Systems, 2019 9.1.11 Intrusion Detection Systems

Factorylink Software Download