Network Intrusion Detection System Using Spark's Scalable Machine Learning Library

An intrusion detection system (IDS) is a hardware component, application utility software or a combination of both types which includes monitoring a computer system associated with a specific network or computer systems for malevolent activity or policy discriminations. From the observation of IDS such detected activity or infiltration is typically reported earlier to a system administrator for further action. Bijone(2016) An IDS performs various functions like monitoring of clients and system actions, identification of inconsistent occurrence using statistical analysis and also recognizing identified attack blueprints in system activity, while improvement of system configuration mistakes establishing and working traps to documentation information about intruders auditing system design for exposures and misconfigurations managing audit trails and stressing user misdemeanor of rules or normal activity measuring the wholeness of vital system and data files. We can Kruegel et al. (2005) distinguish an intrusion in terms of secrecy, integrity, and accessibility. Any event or action causes a violation of secrecy if it is allowed to access resources like memory of printing resources which are connected to a computer in some prohibited act. In the same way an incident or act causes a violate of accessibility if it forbids authentic users to access resources or services residing in a computer.