Analysis of methods for detecting attacks in network environments

This article presents a systematic analysis of intrusion detection and prevention systems (IDS/IPS), which play a crucial role in ensuring information security in modern network infrastructures. The study examines current cybersecurity threats arising from the rapid development of information and communication technologies, including attacks such as DDoS, MITM, brute-force, and malware. It highlights the limitations of traditional security tools and emphasizes the growing need for advanced systems capable of operating in real time. The paper analyzes the main types of IDS/IPS systems, including signature-based, anomaly-based, policy-based, and hybrid approaches. Each method is examined in terms of its working principles, advantages, and limitations. A comparative evaluation is conducted based on criteria such as accuracy, adaptability, resource consumption, and the ability to detect unknown attacks. The results show that signature-based systems provide high accuracy but are limited in detecting new threats, while anomaly-based systems are effective in identifying unknown attacks but may generate a high number of false positives. The hybrid approach combines the strengths of both methods, reducing their limitations and providing a more comprehensive and efficient security solution. The findings of this research are of significant scientific and practical importance for designing and improving modern network security systems.