Skip to content
OpenTrain AIFor AI Companies

Ruling the Unruly: Designing Effective, Low-Noise Network Intrusion Detection Rules for Security Operations Centers

Published Jan 1, 2025
arXiv PDF
Researcher verdict
Starting point
Use as implementation starting point
Benchmark evidence
Missing
Not verified yet
Time to first repro
A few hours
Fast first run
Risk flags
0
None detected

Results and benchmarks

Freshness tier: cold
Ruling the Unruly: Designing Effective, Low-Noise Network Intrusion Detection Rules for Security Operations Centers is the primary contribution described in this paper.

Implementation

Best maintained implementation now

Recommended
Confidence: High
Reproducibility: Strong
koen1999/suricata-check

suricata-check is a command line utility to provide feedback on Suricata rules. The tool can detect various issues including those covering syntax validity, interpretability, rule specificity, rule coverage, and efficiency.

21 stars · 8 forks · Last push Jul 8, 2026 · EUPL-1.2 license

  • License
  • CI
  • Dependencies
  • Docker

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata

Why this implementation
Confidence: high

koen1999/suricata-check is the strongest maintained implementation based on ranking signals. CI workflows are present. License is declared (EUPL-1.2).

Open koen1999/suricata-check
Reproduction risks
  • No repository-level red flags were detected, but paper-specific preprocessing and hyperparameter details may still be under-specified.
  • Selected koen1999/suricata-check as the strongest maintained implementation for new work.
  • Includes CI workflow signals.
  • Includes dependency/environment manifest signals.
  • Repository activity is within the last 24 months.

Compare implementation paths

Compare maintenance quality, reproducibility coverage, and evidence confidence before choosing a reproduction baseline.

koen1999/suricata-check
best maintained
Maintenance
Recently updated
Confidence
High
Reproducibility
Strong
Stars
21
Last push
Jul 8, 2026 (47d)

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata

  • No Docker setup
koen1999/ruling-the-unruly
historical official
Maintenance
Stale
Confidence
High
Reproducibility
Limited
Stars
2
Last push
Jan 16, 2025 (585d)

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata

  • No push in 12+ months
  • No CI pipeline detected
  • No tagged releases

Reproduction readiness

Time to first repro: hours
Last checked: Aug 23, 2026

Ready to run

Ready to reproduce

  • Clone koen1999/suricata-check and install dependencies from pyproject.toml.
  • CI pipeline detected, so automated tests are in place.
  • Last updated 47 days ago.
Open koen1999/suricata-check

Quick start

git clone https://github.com/koen1999/suricata-check.git
pip install -e .

Hugging Face artifacts

No trustworthy direct or curated related Hugging Face artifacts were found yet. Use targeted searches to quickly locate candidate models, datasets, and demos.

Search models Search datasets Search spaces

Tip: start with models, then check datasets and spaces if you need evaluation data or demos.

Research context

Evaluation and human feedback data

Open this paper in HFEPX to review benchmark signals, evaluation modes, and human-feedback protocol context.

Open in HFEPX

Data includes links from Papers with Code ( CC-BY-SA-4.0 ).