Home / Current Issue / Paper 1713226
Intrusion Detection and Prevention Models for Enhancing Organizational Cyber Defense Effectiveness
Subject area: Science,Engineering and Technology · Area of research: Cyber Defense Effectiveness
Abstract
The increasing dependence of organizations on digital infrastructure has amplified exposure to cyber threats that are sophisticated, persistent, and highly adaptive. Traditional perimeter-based security mechanisms have proven insufficient in detecting and mitigating advanced attacks that exploit system vulnerabilities, insider access, and zero-day exploits. Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) have therefore become central components of organizational cyber defense strategies. Over the last two decades, research has produced a wide range of intrusion detection and prevention models, spanning signature-based, anomaly-based, specification-based, and hybrid approaches, as well as centralized, distributed, and collaborative architectures. This paper reviews and synthesizes research on IDS and IPS models published, with the aim of evaluating their effectiveness in enhancing organizational cyber defense. The study examines detection techniques, architectural designs, deployment strategies, performance metrics, and organizational integration challenges. By consolidating existing knowledge, the paper highlights key strengths and limitations of prevailing models and provides a conceptual basis for understanding how intrusion detection and prevention mechanisms contribute to proactive, resilient, and adaptive cyber defense in organizational contexts.
Keywords
Intrusion detection systems; Intrusion prevention systems; Cyber defense; Network security; Anomaly detection; Organizational security
References
[1] A. P. Monteiro, A. M. Soares, and O. L. Rua, “Entrepreneurial orientation and export performance: the mediating effect of organisational resources and dynamic capabilities,” J. for International Business and Entrepreneurship Development, vol. 10, no. 1, p. 3, 2017,
[2] N. A. Abu Seman et al., “The mediating effect of green innovation on the relationship between green supply chain management and environmental performance,” J Clean Prod, vol. 229, pp. 115–127, Aug. 2019, 10.1016/j.jclepro.2019.03.211.
[3] Ratnawati, B. E. Soetjipto, F. D. Murwani, and H. Wahyono, “The Role of SMEs’ Innovation and Learning Orientation in Mediating the Effect of CSR Programme on SMEs’ Performance and Competitive Advantage,” Global Business Review, vol. 19, no. 3_suppl, pp. S21–S38, Jun. 2018, 10.1177/0972150918757842.
[4] H. Liu, “The research of information disseminating system management in new media age,” Lecture Notes in Electrical Engineering, vol. 241 LNEE, no. VOL. 1, pp. 249–258, 2014, 40078-0_21.
[5] C. Alvez, E. Miranda, G. Etchart, and S. Ruiz, “Efficient Iris Recognition Management in Object-Related Databases,” J Comput Sci Technol, vol. 18, no. 02, p. e12, Oct. 2018, 10.24215/16666038.18.E12.
[6] A. Sharma and P. Kaur, “A Multitenant Data Store Using a Column Based NoSQL Database,” 2019 12th International Conference on Contemporary Computing, IC3 2019, Aug. 2019, 10.1109/IC3.2019.8844906.
[7] A. Geissbuhler et al., “Trustworthy reuse of health data: A transnational perspective,” Int J Med Inform, vol. 82, no. 1, pp. 1–9, Jan. 2013,
[8] S. C. Y. L. X Hu, “Optimization of FMCG supply chain by using data-driven methods,” J Intell Manuf, vol. 30, no. 1, pp. 81–92, 2019.
[9] Y. Song, R. Routray, R. Jain, and C. H. Tan, “A data-driven storage recommendation service for multitenant storage management environments,” Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015, pp. 1026–1040, Jun. 2015, 10.1109/INM.2015.7140429.
[10] J. L. L. T. T Wang, “Data-driven fast moving consumer goods supply chain model and application,” Int J Control Autom, vol. 11, no. 5, pp. 125–138, 2018.
[11] J. L. Y. G. DD Ni, “A comparative study of physics-based and data-driven models for predictive maintenance,” Mech Syst Signal Process, vol. 119, pp. 538–550, 2019.
[12] J. Sandefur and A. Glassman, “The Political Economy of Bad Data: Evidence from African Survey and Administrative Statistics,” Journal of Development Studies, vol. 51, no. 2, pp. 116– 132, Feb. 2015, 10.1080/00220388.2014.968138.
[13] A. Castleberry and A. Nolen, “Thematic analysis of qualitative research data: Is it as easy as it sounds?,” Curr Pharm Teach Learn, vol. 10, no. 6, pp. 807–815, Jun. 2018, 10.1016/J.CPTL.2018.03.019.
[14] K. Witkowski, “Internet of Things, Big Data, Industry 4.0 - Innovative Solutions in Logistics and Supply Chains Management,” Procedia Eng, vol. 182, pp. 763–769, 2017, 10.1016/j.proeng.2017.03.197.
[15] A. Kaushik and A. Raman, “The new data- driven enterprise architecture for e-healthcare: Lessons from the indian public sector,” Gov Inf Q, vol. 32, no. 1, pp. 63–74, 2015, 10.1016/J.GIQ.2014.11.002.
[16] J. Wang, S. Das, R. Rai, and C. Zhou, “Data- driven simulation for fast prediction of pull-up process in bottom-up stereo-lithography,” CAD Computer Aided Design, vol. 99, pp. 29–42, Jun. 2018,
[17] D. Li, W. Daamen, and R. M. P. Goverde, “Estimation of train dwell time at short stops based on track occupation event data: A study at a Dutch railway station,” J Adv Transp, vol. 50, no. 5, pp. 877–896, Aug. 2016, 10.1002/ATR.1380.
[18] S. Rosenbaum, “Data governance and stewardship: Designing data stewardship entities and advancing data access,” Health Serv Res, vol. 45, no. 5 PART 2, pp. 1442– 1455, Oct. 2010, 6773.2010.01140.X.
[19] H. Li, L. Xiong, L. Zhang, and X. Jiang, “DPSynthesizer: Differentially private data synthesizer for privacy preserving data sharing,” Proceedings of the VLDB Endowment, vol. 7, no. 13, pp. 1677–1680, 2014,
[20] V. Khatri and C. V. Brown, “Designing data governance,” Commun ACM, vol. 53, no. 1, pp. 148–152, Jan. 2010, 10.1145/1629175.1629210.
[21] S. O’Riain, E. Curry, and A. Harth, “XBRL and open data for global financial ecosystems: A linked data approach,” International Journal of Accounting Information Systems, vol. 13, no. 2, pp. 141–162, Jun. 2012, 10.1016/J.ACCINF.2012.02.002.
[22] M. Kim, J. Jeong, and S. Bae, “Demand forecasting based on machine learning for mass customization in smart manufacturing,” ACM International Conference Proceeding Series, pp. 6–11, Apr. 2019, 10.1145/3335656.3335658.
[23] M. A. Gianfrancesco, S. Tamang, J. Yazdany, and G. Schmajuk, “Potential Biases in Machine Learning Algorithms Using Electronic Health Record Data,” JAMA Intern Med, vol. 178, no. 11, pp. 1544–1547, Nov. 2018, 10.1001/JAMAINTERNMED.2018.3763.
[24] M. S. Jalali and J. P. Kaiser, “Cybersecurity in hospitals: A systematic, organizational perspective,” J Med Internet Res, vol. 20, no. 5, May 2018,
[25] S. Kabanda, M. Tanner, and C. Kent, “Exploring SME cybersecurity practices in developing countries,” Journal of Organizational Computing and Electronic Commerce, vol. 28, no. 3, pp. 269–282, Jul. 2018,
[26] N. M. Radziwill and M. C. Benton, “Cybersecurity Cost of Quality: Managing the Costs of Cybersecurity Risk Management,” Jul. 2017, Accessed: Dec. 20, 2017. [Online]. Available: http://arxiv.org/abs/1707.02653
[27] N. Kammoun, A. Bounfour, A. Özaygen, and R. Dieye, “Financial market reaction to cyberattacks,” Cogent Economics and Finance, vol. 7, no. 1, 2019, 10.1080/23322039.2019.1645584.
[28] “Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1,” Apr. 2018, 10.6028/NIST.CSWP.04162018.
[29] A. A. Cain, M. E. Edwards, and J. D. Still, “An exploratory study of cyber hygiene behaviors and knowledge,” Journal of Information Security and Applications, vol. 42, pp. 36–45, Oct. 2018,
[30] N. A. Hashim, Z. Z. Abidin, N. A. Zakaria, R. Ahmad, and A. P. Puvanasvaran, “Risk assessment method for insider threats in cyber security: A review,” International Journal of Advanced Computer Science and Applications, vol. 9, no. 11, pp. 126–130, 2018, 10.14569/IJACSA.2018.091119.
[31] K. Renaud, S. Flowerday, M. Warkentin, P. Cockshott, and C. Orgeron, “Is the responsibilization of the cyber security risk reasonable and judicious?,” Comput Secur, vol. 78, pp. 198–211, Sep. 2018, 10.1016/J.COSE.2018.06.006.
[32] A. Alvarenga and G. Tanev, “A Cybersecurity Risk Assessment Framework that Integrates Value-Sensitive Design,” Technology Innovation Management Review, vol. 7, no. 4, pp. 32–43, Apr. 2017, 10.22215/TIMREVIEW/1069.
[33] L. Coventry and D. Branley, “Cybersecurity in healthcare: A narrative review of trends, threats and ways forward,” Maturitas, vol. 113, pp. 48–52, Jul. 2018, 10.1016/J.MATURITAS.2018.04.008.
[34] G. Collard, S. Ducroquet, E. Disson, and G. Talens, “A definition of Information Security Classification in cybersecurity context,” Proceedings - International Conference on Research Challenges in Information Science, pp. 77–82, Jun. 2017, 10.1109/RCIS.2017.7956520.
[35] H. Alami, M. P. Gagnon, M. A. Ag Ahmed, and J. P. Fortin, “Digital health: Cybersecurity is a value creation lever, not only a source of expenditure,” Health Policy Technol, vol. 8, no. 4, pp. 319–321, Dec. 2019, 10.1016/J.HLPT.2019.09.002.
[36] L. A. Saxon, N. Varma, L. M. Epstein, L. I. Ganz, and A. E. Epstein, “Factors influencing the decision to proceed to firmware upgrades to implanted pacemakers for cybersecurity risk mitigation,” Circulation, vol. 138, no. 12, pp. 1274–1276, 2018, 10.1161/CIRCULATIONAHA.118.034781.
[37] M. Y. Ilchenko, L. A. Uryvsky, and A. V. Moshinskaya, “Developing telecommunication strategies based on scenarios in the information community,” Cybern. Syst. Analysis, vol. 53, no. 6, pp. 905–913, Nov. 2017, 10.1007/s10559-017-9992-9.
[38] V. Y. Meytus, “Problems of constructing intelligent systems. Knowledge representation,” Cybern. Syst. Analysis, vol. 55, no. 4, pp. 521–530, Jul. 2019, 10.1007/s10559-019-00160-5.
[39] A. V. Palagin, “Functionally oriented approach in research-related design,” Cybern. Syst. Analysis, vol. 53, no. 6, pp. 986–992, Nov. 2017,
[40] I. G. Kryvonos, I. V. Krak, O. V. Barmak, and A. I. Kulias, “Methods to Create Systems for the Analysis and Synthesis of Communicative Information,” Cybern Syst Anal, vol. 53, no. 6, pp. 847–856, Nov. 2017, 017-9986-7.
[41] J. Wang, Y. Zhou, Y. Wang, J. Zhang, C. L. P. Chen, and Z. Zheng, “Multiobjective Vehicle Routing Problems with Simultaneous Delivery and Pickup and Time Windows: Formulation, Instances, and Algorithms,” IEEE Trans Cybern, vol. 46, no. 3, pp. 582–594, Mar. 2016,
[42] L. Oneto et al., “Dynamic delay predictions for large-scale railway networks: Deep and shallow extreme learning machines tuned via thresholdout,” IEEE Trans Syst Man Cybern Syst, vol. 47, no. 10, pp. 2754–2767, Oct. 2017,
[43] Y. Zhang and B. Li, “A Novel Software Defined Networking Framework for Cloud Environments,” Proceedings - 3rd IEEE International Conference on Cyber Security and Cloud Computing, CSCloud 2016 and 2nd IEEE International Conference of Scalable and Smart Cloud, SSC 2016, pp. 30–35, Aug. 2016,
[44] L. Coventry and D. Branley, “Cybersecurity in healthcare: A narrative review of trends, threats and ways forward,” Maturitas, vol. 113, pp. 48–52, Jul. 2018, 10.1016/J.MATURITAS.2018.04.008;
[45] M. Choi and W. E. A. Ruona, “Individual readiness for organizational change and its implications for human resource and organization development,” Human Resource Development Review, vol. 10, no. 1, pp. 46–73, Mar. 2011,
[46] J. Pfeffer, “Fighting the war for talent is hazardous to your organization’s health,” Organ Dyn, vol. 29, no. 4, pp. 248–259, Mar. 2001,
[47] B. J. L. Berry, L. D. Kiel, and E. Elliott, “Adaptive agents, intelligence, and emergent human organization: Capturing complexity through agent-based modeling,” Proc Natl Acad Sci U S A, vol. 99, no. SUPPL. 3, pp. 7187–7188, May 2002, 10.1073/PNAS.092078899.
[48] M. Gaynor, K. Ho, and R. J. Town, “The Industrial Organization of Health-Care Markets,” J Econ Lit, vol. 53, no. 2, pp. 235– 284, Jun. 2015, 10.1257/JEL.53.2.235<SPAN.
[49] M. Gaynor, K. Ho, and R. J. Town, “The industrial organization of health-care markets,” J Econ Lit, vol. 53, no. 2, pp. 235–284, Jun. 2015,
[50] G. M. Grossman and E. Helpman, “Managerial incentives and the international organization of production,” J Int Econ, vol. 63, no. 2, pp. 237– 262, Jul. 2004, 1996(03)00072-2.
[51] S. Chanias, M. D. Myers, and T. Hess, “Digital transformation strategy making in pre-digital organizations: The case of a financial services provider,” Journal of Strategic Information Systems, vol. 28, no. 1, pp. 17–33, Mar. 2019,
[52] C. M. Olszak, “Toward Better Understanding and Use of Business Intelligence in Organizations,” Information Systems Management, vol. 33, no. 2, pp. 105–123, Apr. 2016,
[53] T. J. Sturgeon, “Modular production networks: A new American model of industrial organization,” Industrial and Corporate Change, vol. 11, no. 3, pp. 451–496, 2002, 10.1093/ICC/11.3.451.
[54] K. Walshe and S. M. Shortell, “When Things Go Wrong: How Health Care Organizations Deal With Major Failures,” Health Aff, vol. 23, no. 3, pp. 103–111, May 2004, 10.1377/hlthaff.23.3.103.
[55] J. Abelson, K. Li, G. Wilson, K. Shields, C. Schneider, and S. Boesveld, “Supporting quality public and patient engagement in health system organizations: development and usability testing of the Public and Patient Engagement Evaluation Tool,” Health Expect, vol. 19, no. 4, pp. 817–827, Aug. 2016, 10.1111/HEX.12378.
[56] D. W. Roblin, T. K. Houston, J. J. Allison, P. J. Joski, and E. R. Becker, “Disparities in Use of a Personal Health Record in a Managed Care Organization,” Journal of the American Medical Informatics Association, vol. 16, no. 5, pp. 683–689, Sep. 2009, 10.1197/jamia.M3169.
[57] K. Zhu and K. L. Kraemer, “Post-adoption variations in usage and value of e-business by organizations: Cross-country evidence from the retail industry,” Information Systems Research, vol. 16, no. 1, pp. 61–84, 2005, 10.1287/ISRE.1050.0045.
[58] O. Tamburis, M. Mangia, M. Contenti, G. Mercurio, and A. R. Mori, “The LITIS conceptual framework: Measuring eHealth readiness and adoption dynamics across the Healthcare Organizations,” Health Technol (Berl), vol. 2, no. 2, pp. 97–112, Jun. 2012, 10.1007/S12553-012-0024-5.
[59] M. Sajid and K. Ahsan, “ROLE OF ENTERPRISE ARCHITECTURE IN HEALTHCARE ORGANIZATIONS AND KNOWLEDGE-BASED MEDICAL DIAGNOSIS SYSTEM,” Journal of Information Systems and Technology Management, vol. 13, no. 2, pp. 181–192, Sep. 2016, 17752016000200002;
[60] A. Alibrahim and S. Wu, “An agent-based simulation model of patient choice of health care providers in accountable care organizations,” Health Care Manag Sci, vol. 21, no. 1, pp. 131–143, Mar. 2018, 10.1007/S10729-016-9383-1.
[61] B. Weiner, “A theory of organizational readiness for change,” Implement Sci, vol. 4, 2009.
[62] M. Arena and G. Azzone, “Identifying Organizational Drivers of Internal Audit Effectiveness,” International Journal of Auditing, vol. 13, no. 1, pp. 43–60, Mar. 2009,
[63] M. A. Kareem and A. A. A. Alameer, “The impact of dynamic capabilities on organizational effectiveness,” Management and Marketing, vol. 14, no. 4, pp. 402–418, Dec. 2019,
[64] D. Holt, H. Feild, S. Harris, A. Armenakis, H. Feild, and S. Harris, “Readiness for Organizational Change—The Systematic Development of a Scale,” J Appl Behav Sci, vol. 43, no. 2, 2007.
[65] L. M. Fonseca and J. P. Domingues, “The best of both worlds? Use of Kaizen and other continuous improvement methodologies within Portuguese ISO 9001 certified organizations,” TQM Journal, vol. 30, no. 4, pp. 321–334, Jul. 2018,
[66] M. Augier and D. J. Teece, “Dynamic capabilities and the role of managers in business strategy and economic performance,” Organization Science, vol. 20, no. 2, pp. 410– 421, Mar. 2009, 10.1287/ORSC.1090.0424.
[67] V. A. Assenova and O. Sorenson, “Legitimacy and the benefits of firm formalization,” Organization Science, vol. 28, no. 5, pp. 804– 818, 2017,
[68] T. Heinze, P. Shapira, J. D. Rogers, and J. M. Senker, “Organizational and institutional influences on creativity in scientific research,” Res Policy, vol. 38, no. 4, pp. 610–623, May 2009,
[69] C. Shea, S. Jacobs, D. Esserman, K. Bruce, and B. Weiner, “Organizational readiness for implementing change: a psychometric assessment of a new measure,” Implement Sci, vol. 9, no. 1, 2014.
[70] R. Snyder-Halpern, “Indicators of organizational readiness for clinical information technology/systems innovation: A Delphi study,” Int J Med Inform, vol. 63, no. 3, pp. 179–204, 2001, 5056(01)00179-4.
[71] L. Agostini and R. Filippini, “Organizational and managerial challenges in the path toward Industry 4.0,” European Journal of Innovation Management, vol. 22, no. 3, pp. 406–421, May 2019,
[72] A. Lopez-Cabrales, R. Valle, and I. Herrero, “The contribution of core employees to organizational capabilities and efficiency,” Hum Resour Manage, vol. 45, no. 1, pp. 81– 109, Mar. 2006,
[73] S. L. Margolis and C. D. Hansen, “Visions to Guide Performance: A Typology of Multiple Future Organizational Images,” Performance Improvement Quarterly, vol. 16, no. 4, pp. 40– 58, Oct. 2008, 8327.2003.TB00293.X.
[74] A. Gunasekaran et al., “Big data and predictive analytics for supply chain and organizational performance,” J Bus Res, vol. 70, pp. 308–317, Jan. 2017,
[75] N. Melville, K. Kraemer, and V. Gurbaxani, “Information technology and organizational performance: An integrative model of IT business value,” MIS Q., vol. 28, no. 2, pp. 283–321, 2004,
[76] M. Touré, L. Poissant, and B. R. Swaine, “Assessment of organizational readiness for e- health in a rehabilitation centre,” Disabil Rehabil, vol. 34, no. 2, pp. 167–173, 2012, 10.3109/09638288.2011.591885.
How to cite this paper
@article{1713226,
author = {Adetomiwa A. Dosunmu, Peter Olusoji Ogundele},
title = {Intrusion Detection and Prevention Models for Enhancing Organizational Cyber Defense Effectiveness},
journal = {Iconic Research And Engineering Journals},
year = {2020},
volume = {4},
number = {6},
pages = {310-324},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1713226.pdf},
abstract = {The increasing dependence of organizations on digital infrastructure has amplified exposure to cyber threats that are sophisticated, persistent, and highly adaptive. Traditional perimeter-based security mechanisms have proven insufficient in detecting and mitigating advanced attacks that exploit system vulnerabilities, insider access, and zero-day exploits. Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) have therefore become central components of organizational cyber defense strategies. Over the last two decades, research has produced a wide range of intrusion detection and prevention models, spanning signature-based, anomaly-based, specification-based, and hybrid approaches, as well as centralized, distributed, and collaborative architectures. This paper reviews and synthesizes research on IDS and IPS models published, with the aim of evaluating their effectiveness in enhancing organizational cyber defense. The study examines detection techniques, architectural designs, deployment strategies, performance metrics, and organizational integration challenges. By consolidating existing knowledge, the paper highlights key strengths and limitations of prevailing models and provides a conceptual basis for understanding how intrusion detection and prevention mechanisms contribute to proactive, resilient, and adaptive cyber defense in organizational contexts.},
keywords = {Intrusion detection systems; Intrusion prevention systems; Cyber defense; Network security; Anomaly detection; Organizational security},
month = {December},
}