Two Step Authentication for an Anomaly based Intrusion Detection System

Intrusion detection is an effective approach of dealing with problems in the area of network security. Rapid development in technology has raised the need for an effective intrusion detection system as the traditional intrusion detection method cannot compete against newly advanced intrusions. As most IDS try to perform their task in real time but their performance hinders as they undergo different level of analysis or their reaction to limit the damage of some intrusions by terminating the network connection, a real time is not always achieved. The system implements the detection algorithm as a Snort preprocessor component. Since they work together, a highly effective system against unknown threats (which was the main aim of the designed system.).