6. Network IDS

In order to analyze incoming and outgoing traffic, we implemented a network intrusion detection system. This is in addition to the our host based IDS, OSSEC. While a host based IDS is able to monitor intrusions on an individual machine, a Network IDS allows us to detect anomalous behaviour over a subnetwork.