Adaptive Intrusion Detection Systems

Abstract

This chapter deals with a challenging issue in intrusion detection research field, which is IDS adaptability. First, it introduces the intrusion detection concepts, then presents with details the two existing generations of IDSs and addresses their major problem: permanent coverage of new attacks patterns in a dynamic changing environment. Thereafter, it evokes the requirement of adaptability in IDS as a mean to remedy this deficiency. Later, it explores the most eminent approaches that are proposed for IDS adaptability. It describes their functional architecture and discusses their strong aspects and weaknesses. At the end, new trends toward the intrusion detection adaptability problematic are mentioned and followed by a conclusion.