  There have been numerous works on network intrusion detection and prevention
systems, but work on application layer intrusion detection and prevention is
rare and not very mature. Intrusion detection and prevention at both network
and application layers are important for cyber-security and enterprise system
security. Since application layer intrusion is increasing day by day, it is
imperative to give adequate attention to it and use state-of-the-art algorithms
for effective detection and prevention. This paper talks about current state of
application layer intrusion detection and prevention capabilities in commercial
and open-source space and provides a path for evolution to more mature state
that will address not only enterprise system security, but also national
cyber-defence. Scalability and cost-effectiveness were important factors which
shaped the proposed solution.
