An Optimization Model for Appraising Intrusion-Detection Systems for Network Security Communications: Applications,...

Area of Science:

• Cybersecurity
• Information Technology
• Decision Science

Background:

• Cyber-attacks are increasingly sophisticated, challenging the effectiveness of current intrusion-detection systems (IDSs).
• The reliability of critical security services like privacy, authenticity, and accessibility is threatened by undetected breaches.
• Organizations employ various strategies, including firewalls and access controls, but evaluating IDS effectiveness remains a complex challenge.

Purpose of the Study:

• To develop a robust methodology for evaluating and selecting the most effective intrusion-detection systems (IDSs).
• To address the complexity and uncertainty inherent in multi-criteria decision-making for IDS selection.
• To provide a framework for organizations to identify optimal IDS solutions.

Main Methods:

• A multi-criteria decision-making (MCMD) approach was utilized, incorporating q-rung orthopair fuzzy sets (q-ROFS) and q-rung orthopair fuzzy numbers (q-ROFNs) to handle ambiguity and uncertainty.
• The entropy method was applied to determine the weights of key criteria and sub-criteria.
• The combined compromised solution (CoCoSo) method, combined with the q-rung orthopair fuzzy weighted geometric (q-ROFWG) operator, was used to evaluate and rank six different IDSs.

Main Results:

• The study successfully evaluated six intrusion-detection systems (IDSs) based on multiple criteria, considering expert opinions and uncertainties.
• Comparative and sensitivity analyses confirmed the stability and reliability of the proposed evaluation framework.
• Suricata emerged as the most effective IDS, primarily due to its superior multi-threading performance.

Conclusions:

• The proposed q-rung orthopair fuzzy multi-criteria decision-making approach provides a reliable method for evaluating and selecting effective intrusion-detection systems (IDSs).
• The findings highlight the importance of considering multi-threading performance in IDS selection for enhanced cybersecurity.
• Organizations can leverage this methodology to make informed decisions regarding IDS procurement and implementation.