PRIORITIES IN THE DEPLOYMENT OF NETWORK INTRUSION DETECTION SYSTEMS

The purpose of this work is to study the priorities in the deployment of network intrusion detection systems (NIDS) in small corporate networks. The goal is to minimize costs while optimizing performance. Despite apparent benefits of automated intrusion detection systems (IDS), they are not widely deployed at this time. Our main research problem is defining key cost areas of NIDS deployment and then developing ways to achieve the required functionality with minimal costs. We present a concept of pre-ids stage, where small, isolated tools are used to target network security problems. The ease of deployment and low maintenance costs help of these tools allow to combat a large part of these problems at a fraction of the costs of a full IDS.