Scholarlink

As Internet of Things (IoT) devices become increasingly integrated into everyday life, their security implications for home networks demand greater attention. This study investigates the effectiveness of two open source intrusion detection systems (IDS), Snort and Suricata, in monitoring IoT device activity using a Raspberry Pi 5 configured as a wireless gateway. By isolating the network environment and connecting devices, which include a Motorola smartphone, iPhone 6 s, Petcube smart camera, and Fitbit Sense 2, to a dedicated Wi-Fi subnet hosted by the Raspberry Pi, all traffic could be captured and analyzed in real time. Both IDS tools were run concurrently with similar rule sets to evaluate their packet capture behavior, detection capabilities, and logging granularity. The results reveal that Suricata, with its default full-packet logging, provides more comprehensive traffic visibility, while Snort’s event-based logging requires additional configuration to match this level of detail. Ultimately, this research highlights the practical considerations and configuration trade-offs when deploying IDS solutions for smart home environments.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

System Settings and Security in IoT Devices Using Snort and Suricata

  • 会议论文

  • 发表日期：

    2026年

查看全文
  • Jeffrey Berg,
  • Bing Zhou

摘要

As Internet of Things (IoT) devices become increasingly integrated into everyday life, their security implications for home networks demand greater attention. This study investigates the effectiveness of two open source intrusion detection systems (IDS), Snort and Suricata, in monitoring IoT device activity using a Raspberry Pi 5 configured as a wireless gateway. By isolating the network environment and connecting devices, which include a Motorola smartphone, iPhone 6 s, Petcube smart camera, and Fitbit Sense 2, to a dedicated Wi-Fi subnet hosted by the Raspberry Pi, all traffic could be captured and analyzed in real time. Both IDS tools were run concurrently with similar rule sets to evaluate their packet capture behavior, detection capabilities, and logging granularity. The results reveal that Suricata, with its default full-packet logging, provides more comprehensive traffic visibility, while Snort’s event-based logging requires additional configuration to match this level of detail. Ultimately, this research highlights the practical considerations and configuration trade-offs when deploying IDS solutions for smart home environments.