Recent advances on intrusion detection techniques

The challenge to current intrusion detection systems (IDSs) is how to maximize accurate alerts. Prevalent researches are extremely diverse in detection analysis techniques, which are generally the most complex and significant components for maximizing accurate alerts. After providing a general principles of IDSs, such as common architecture, information source, and analysis techniques, this paper focuses on the discussion of the most popular analysis approaches that have been proposed in recent researches, and provides an unbiased assessment for each one. Instead of describing details of these techniques, this paper concentrates on underlying principles and methods. Those who are interested in the details are referred to websites or the original articles listed in reference.