Portable Intrusion Detection System

Abstract

Every network connection made is exposed to a security threat. Due to this, crucial, confidential, important information can be lost or even exploited by an intruder. Hence an intrusion detection system (IDS) is needed to detect and notify the network administrators if such an event occurs. Though such systems are present in organizations, it is confined to a device or a rack. In this proposed system, an open source network intrusion detection system called SNORT is installed on to a Raspberry Pi. This is then implemented at a switch level, where it is connected to a configured SPAN port of a switch and is used to monitor the traffic through the switch. This system provides logs and information of the traffic, as well as notifies the network administrator through a message in real time. The intrusion detection system’s portability, ability to notify the administrator, and the display of packet information is what makes this system, more advanced and convenient for any organization’s security.