Comparison of Hybrid Intrusion Detection System

IDS have an important role in dispelling and preventing an intrusion or abuse of access rights. In its development, research on IDS is growing. IDS consist of several detection models, one of which is hybrid-based, which in IDS detection combines the signature and anomaly models. This method is considered more effective because it combines the advantages of the speed of signature detection and the ability to analyze new attacks from the anomaly model. However, from existing models and frameworks hybrid-based IDS still needs to be further developed to be implemented in the industry. From a number of existing IDS-based studies, this paper intends to conduct a review with the aim that researchers who wish to develop hybrid-based IDS know which methods and architecture are best to be implemented. This paper reviews hybrid IDS research in the last five years.