Ontological-based Intrusion Detection System (IDS): A Comparative Study

Examining network traffic is becoming increasingly important due to the various hacking methods that are being created every day. Being only aware of the source and destination of the traffic is no longer sufficient. It is important to consider the packet’s payload. As a result, businesses have begun implementing Deep Packet Inspection (DPI) technologies to examine all network data. However, due to both the rising sophistication of assaults and the enormous amount of traffic being received, the accuracy and computing effort of such solutions continue to pose severe problems. In this research, we present a rapid ontological Intrusion Detection System (IDS) for deep packet inspection, where the ontology itself is built by a set of encrypted legacy rules to quickly reach a conclusion. By analyzing the payload without decrypting it, our suggested solution maintains the privacy of the network users. In terms of accuracy and runtime, experimental findings are promising.