Evaluation of Intrusion Detection Systems

This paper proposes a group of criteria for evaluating Intrusion Detection Systems (IDS for short). In this article, an existing evaluation strategy of intrusion detection system is going to be briefly introduced as a case to be assessed against our proposed criteria. Intrusion Detection Systems are critical components to the primary defence of computer system and network security. An evaluation of IDS provides valuable data to improve the tested system. Through analysing the data, scientists are able to figure out the advantages and disadvantages of the system. In addition, evaluating Intrusion Detection Systems provides a way to study the attack mechanisms of some malicious programs. Developers of an intrusion detection system can update it according to the information, and hence new versions of the system have the ability to detect the same type of intrusions.