A Review on Information Flow in Intrusion Detection System

An Intrusion Detection System (abbreviated as IDS) is a defense system, which detects hostile activities in a network. The key is then to detect and possibly prevent activities that may compromise system security, or a hacking attempt in progress including reconnaissance/data collection phases that involve for example, port scans. One key feature of intrusion detection systems is their ability to provide a view of unusual activity and issue alerts notifying administrators and/or block a suspected connection. This paper explains IDS classification and different phases of Intrusion analysis. This paper also describes the working of each component involved in multi-tiered architecture.