Suricata-Based Intrusion Detection and Isolation System for Local Area Networks

Malicious activity includes intentionally disrupting or damaging computer systems, networks, or data, including distributing malware, phishing attempts, denial of service, and unauthorized access. Criminals exploit vulnerabilities for financial gain or espionage. Effective prevention involves strong cybersecurity measures such as firewalls, anti-virus software, and user training. Failure to address vulnerabilities can result in data security breaches and financial losses. An Intrusion Detection System (IDS) is essential to cybersecurity measures. It scrutinizes network data or system operations for any indications of malicious actions. It plays a vital role in identifying potential threats and taking appropriate action to ensure the security of the network or system. An IDS simplifies identifying and reacting to accurate data, safeguarding critical data and systems from potential risks. Utilizing Suricata IDS, we put forth an Intrusion Detection and Isolation System (IDIS). This system is designed to identify any harmful nodes present in the Local Area Network (LAN) and isolate them. This is achieved by utilizing the configuration of an Access Control List (ACL) in the routers. This approach enhances the security measures, ensuring a safer network environment.