Evaluación de la efectividad de los sistemas de detección de intrusiones en redes, sus amenazas y vulnerabilidades

Abstract

The evolution of technology has brought about great scientific advancements, which has led to an increase in network threats and vulnerabilities. In response to these threats, all organizations have implemented increasingly complex security systems, where intrusion detection systems play an important role in protecting the organization's data and infrastructure. It should be noted, however, that not all detection systems are equally effective against the diverse range of cyberattacks present in the environment. Today, most organizations add IDS without first evaluating them comparatively against the current threat and vulnerability landscape. This leads to a misperception of security and the possibility of breaches that compromise critical assets. Therefore, there is a need for a comprehensive evaluation of the effectiveness of available IDS, considering their actual detection capacity, error rate, robustness against attacks, and adaptability to emerging threats.