Intrusion Detection Tools: Open Source and Commercial

This report provides an overview of intrusion detection tools, differentiating between open-source and commercial options. It explores various tools like OSSEC, Suricata, Snort, and AlienVault, highlighting their features and functionalities. The report analyzes the cost implications, emphasizing the potential savings associated with utilizing open-source or freeware intrusion detection systems compared to commercial alternatives. Specific examples, such as AlienVault's pricing structure, are used to illustrate the cost benefits. The document emphasizes the importance of intrusion detection systems in securing networks and discusses how these systems can be designed using classification techniques like k-mean and neural networks.

Intrusion detection tools
An intrusion detection tool is a device or software application that is typically embedded
in standalone hardware that monitors a network or systems for malicious activity or policy
violations. Intrusion detection systems act as a security to the network for which it is installed.
Malicious users intrude the network, and this poses a high-security threat to the network system.
The intrusion detection systems are designed with the help of classification techniques. The key
issue and the basis of research are to find out which classification technique works well when
combined with the intrusion detection system. The classification techniques like k-mean method
and neural networks are used in designing intrusion detection systems
Open source and freeware intrusion detection tools
According (Cooper, 2018), to the following, are some of the open source and freeware intrusion
detection tools:
a) Open Source Security (OSSEC)
b) Suricata
c) Snort
d) Bro Network Security Monitor
e) Open WIPS NG
Commercial intrusion detection tools
The following are commercially available intrusion detection tools
a) AppShield
b) InterDo
c) SecureIIS

What would the estimated cost savings be for an organisation to use the open source or
freeware versions?
During my search, I came across Alienvalt which has three packages to offer for its IDS.
(a) Essential package – Starts at $1075 annually and is meant for a small business whose
only aim is to have secure systems and compliance program (“AlienVault Pricing,” n.d.).
(b) Standard package – Starts at $1695 annually and is meant for IT security teams looking
to gain efficiency through security orchestration, automation, and deeper security
analysis.
(c) Premium package - Starts at $1695 annually and is meant for Ideal for IT security teams
looking to meet specific PCI DSS audit requirements.
It is therefore prudent to conclude that the savings would be massive for any organization that
chooses to use the freeware or the open source IDs that are readily available.

References
Cooper, S. (2018, February 22). 10 top network intrusion detection tools for 2018. Retrieved February
24, 2019, from https://www.comparitech.com/net-admin/network-intrusion-detection-tools/
AlienVault Pricing – Affordable Plans to Fit Any Budget. (n.d.). Retrieved February 25, 2019, from
https://www.alienvault.com/pricing