[MyStudy] Network Intrusion Detection System (NIDS) using Snort, Kafka, Spark and Deep Learning
Snort captures suspicious packets and publishes them to Kafka. A consumer retrieves pcaps packets and uses Kafka to transform them to KDD99 format. Then the data is predicted whether they are normal data or not by a pre-trained Deep Learning model. The results are sent back to Kafka. Another consumer retrieves these results and shows to users.