RuleAutoPilot: Synthesizing Deployable Suricata Rules from Network Traffic

Rule-based Intrusion Detection Systems IDS such as Suricata are central to network security, yet crafting effective detection rules demands deep expert knowledge and cannot keep pace with emerging threats. Existing LLM-based approaches can reduce analyst effort, but they either rely on curated...