Comprehensive Review of Network Intrusion Detection and Prevention Systems

Abstract— The global network infrastructure remains vulnerable and is susceptible to attacks from various sources. These attacks can take the form of denial-of-service (DoS) or other malicious threats. To safeguard such networks, Intrusion Detection and Prevention Systems (IDPS) are employed. These systems serve as critical security mechanisms designed to detect and prevent both internal and external threats.IDPS continuously monitor network traffic using a variety of techniques. When suspicious or malicious activity is detected, the system blocks the threat and generates alerts for further investigation. Intrusion remains a significant challenge, especially in hybrid computing environments.This paper explores key concepts including network intrusion, types of intrusions, intrusion detection systems, and a review of previous research related to IDPS. The software solutions implemented to counter such threats are referred to as intrusion prevention systems (IPS). Various types of prevention systems are discussed within this study.