Intrusion Detection System in Python

摘要

Intrusion detection and prevention systems are an epitome of system security and network security by an extension. This paper essentially explains on how to make a basic intrusion detection system entirely in Python both by using external modules like Scapy or by designing layer 2 raw sockets. With the expanding application of computer networks, various and incredibly enhanced intrusive tools and mechanisms have surfaced which exploit the security of individuals and private organizations. These systems are designed to be as foolproof as possible and provide highest possible level of security from intruding agencies. Except that these systems/mechanisms are NOT completely fool-proof. Essentially these systems are particularly designed to either protect the host or protect an entire network or the mainframe, depending on the design.