Intrusion Detection Systems Overview
Contributed by Chris Figueroa
Modern intrusion detection systems provide a first line of defense against attackers for organizations. These systems com in various forms and provide both simple and complex functions to facilitate the specific needs of the organization or individual. An overview of intrusion detection systems is provided including the differences between an intrusion detection system and an intrusion prevention system. Several of the intrusion detection methods and techniques such as misuse detection and anomaly detection will be covered. A review of the different types of intrusion detection systems including network-based, client-based, software-based, and appliance based systems has been included. IDS offerings from several vendors have also been selected and reviewed detailing some of the features of each. Finally, some suggestions and guidelines for selecting the right intrusion detection system for an individual or organization will be provided.
This document is in PDF format. To view it click here.