Describe the term intrusion detection in the context of IT-
security?
Answer Posted / vik
Intrusion Detection refers to pro-active monitoring of a
network for unauthorized access as defined by the security
policy. It uses known patterns, of attacks, looks at
signatures, and can check against a known database of sites.
IDS features are built into many of the new Integrated
Security Appliances by vendors like Cisco, Juniper, etc.
Newer firewall vendors like Palo Alto networks are
integrating many features into the firewalls that overlap
with an IDS. Snort is a free IDS that has been available
for years. It is great- if you have some in house IT expertise.
IDS is often listed with IPS- Intrusion Prevention Systems.
| Is This Answer Correct ? | 7 Yes | 1 No |
Post New Answer View All Answers
How the telecommunicaton is working?I have heared that one control will be there for asia countries for other countries there will be another,what is that how they work?
Explain for a small lan which class of addressing is used?
What is the difference between arp & rarp?
Name the port used by PING.
What type of network do you use at home?
How to implement PIX firewall security?
What is the difference between ripv1 & ripv2?
What is RIS?
What is site-to-site vpn?
What is a Smart Card or Chip Card or Integrated Circuit Card (ICC)?
Why do we use virtual private network?
What is intrusion prevention systems (ips)?
How do we use rsa for both authentication and secrecy?
How does phishing work?
Why should you care about the OSI Reference Model