Feature Based Comparative Analysis of Traditional Intrusion Detection System and Software-Defined Networking Based Intrusion Detection System

Intrusion Detection Systems (IDS) play a crucial role in a comprehensive security framework for an organization by detection and response to security incidents, encompassing both network-based and host-based threats. The selection of IDS components and its configuration depends upon the security requirements of the company and the prevailing threat landscape they encounter. The conventional Intrusion Detection System (IDS) and the Software-Defined Networking (SDN) IDS share the common objective of identifying and mitigating network security breaches. However, they diverge notably in terms of their architectural design and operational methodology. This paper presents a comparative analysis between a traditional Intrusion Detection System (IDS) and a Software-Defined Networking (SDN) based IDS. It aims to offer a comprehensive examination of both IDS systems, enabling organizations to make informed decisions considering their unique security requirements, network architecture, and operational limitations..