Intrusion Detection Systems – A Reference Guide
Intrusion Detection Systems – A Reference Guide
Intrusion detection systems (IDS) are used to determine whether security has been breached and unauthorized access granted to property, resources or data.
Examples of perimeter-based intrusion detection systems include buried differential-pressure systems, fence-mounted detection systems, infrared (IR) beam systems, stressed-wire fences, and microwave barriers. Intrusion detection (ID) products that provide perimeter security include both equipment, hardware and software components.
They can be used to protect oil fields, prisons, nuclear power plants, chemical processing facilities, embassies, government and corporate offices, military bases and archeological sites. There are two broad applications areas: systems for network systems and systems for property and personnel. Intrusion detection systems for computer networks are used to identify security breaches, prevent external attacks, and stop the internal misuse of resources. Pattern matching detection and statistical anomaly detection are the most common techniques. Intrusion detection systems (IDS) for computer networks differ in terms of features.
Misuse detection systems compare information to a database of attack signatures to determine whether a potential threat is documented. Anomaly detection systems compare monitored network segments to baseline values for network load, protocol and packet size. Network-based intrusion detection systems (NIDS) are designed to detect malicious packets that can compromise firewalls.
Host-based intrusion detection systems examine the activity on individual computers. Passive systems are used to detect security breaches, log data, and signal alerts. By contrast, reactive systems respond to suspicious activities by terminating a user’s session or reprogramming firewalls to block network traffic from specific IP addresses or domains. There are many types of intrusion detection systems (IDS) for perimeter security. Passive systems detect radiant energy or changes in an existing infrared, seismic, or magnetic field.
Active systems radiate beams of infrared light or radio frequency (RF) signals to create a detection field which, when interrupted, causes an alarm to sound or an annunciator to display. Visible systems such as fences can deter potential intruders and lower maintenance costs.
Covert systems are more expensive than exposed ones, but hide the features of the intrusion detection system. Line of sight systems require an unobstructed view from the origin of the detection field to its termination. Examples include bi-static microwave, mono-static microwave, active infrared, and passive infrared systems.
Terrain-based products include buried sensors, sensor fences, fence-mounted sensors, and RF sensors. Volumetric intrusion detection systems create a three-dimensional detection field that is difficult to defeat. Examples include microwave, passive IR, electric field, and video motion products. Linear detection systems require less physical space, but are easier to defeat by bridging or bypassing. Examples include fence mounted products, strain-sensitive sensors, and sensor fences.
I often get people asking me how to choose the best system to serve the purpose; I would say dependant on the business objective in which the applied security system is required the ROI (Return on Investment) and ease of maintenance should be the baseline for your choice.
Naser Awad, Senior Security Consultant Article Source:http://www.articlesbase.com/security-articles/intrusion-detection-systems-a-reference-guide-993679.html
Welcome back! You may want to subscribe to my RSS feed. Thanks for visiting!
If you enjoyed this post, make sure you subscribe to my RSS feed!
Related Posts - Top 10 tips for Wireless Home Security A wireless home network brings many benefits – all the family can access the Internet simultaneously, you can use a laptop anywhere within the radius of the wireless network, freeing you from physical constraints, you don’t have to string Cat-5 cabling throughout your house (no holes in the wall either!)......
- Information Security and Business Management: The History and Reality of Misconceptions, recommend, new approach Daniil M. Utin, MS, Mikhail A. Utin, Ph.D. Information Security and Business Management: The History and Reality of Misconceptions Preamble. We published an article in Information Security Journal: A Global Perspective, 17:1 – 6, 2008 “General Misconceptions about Information security Lead to Insecure World” [1]. We would like to return......
- Spyware Isolator is a Rogue Security Application That Should Be Avoided Spyware Isolator is a rogue antispyware application that displays security warnings in an attempt to frighten the user into believing that threats and infections reside on their PC. These messages are totally fake. If you receive popup warnings of this sort, exit if possible and do not download the scan.......
- Security in E-Business Security in E-Business: An Introduction A central issue in the commercial use of the Internet is security. Surveys state that the economic success of electronic business applications is inhibited because the Internet lacks appropriate security measures. One way to increase the trust of consumers in electronic business applications is......
- Computer Security: Protecting Your Data Computer Security has become increasingly important as more and more companies rely on software to run their business. This article will provide you information about computer security and how you can use it to protect your data. Whether you’re a business owner, an executive, or an IT manager, the following......
Related Websites -
Do Online Diet Plans Work? As our lives become more focused around online activities, it was only natural that diets would make the move towards becoming more online based. There are literally thousands of different sites that purport to help you lose weight, but do these plans really work? For many dieters, they do, and...... -
Guest Post: Why Passionate Networking Gives More Than It Gets This is a guest by Rich Lazzara, who I had a chance to interview for the interviews with up and coming bloggers podcast. Look tomorrow for the interview which is absolutely fantastic. Rich is an entrepreneur, executive, and businessman who is in the business of manufacturing luxury Yacths, and teaching...... -
The most powerful and complete PC security system, on the market today! The U.S. government estimates that the average computer in America (including home computers) may be hacked as much as 4 or 5 times a week. Not surprisingly, credit and identity theft are now the fastest growing crimes in America. These thefts are reaching epidemic proportions with over 27 million victims...... - Roth IRA Conversion Calculators Most of you know that 2010 presents a tremendous opportunity for baby boomers with higher incomes to open a Roth IRA and/or to convert a conventional IRA to a Roth. The reason is that the current income limitations on Roth contributions and conversions will be lifted. Under present law, only......
- VoIP Security VoIP security has been called in question recently, though there is little evidence to indicate that VoIP security is any less than conventional telephony systems. VoIP voice data is transmitted via a packet-switched data network using IP. VoIP systems can carry a significant higher number of calls, and very much......
« Was the Conficker Virus a Hoax? | Home | Trojans, Worms, Rootkits, Explained Simply »
Leave a Comment