Intrusion Detection and Prevention

Intrusion detection involves monitoring computer systems and networks for signs of potential incidents, threats and violations of security policies and practices.  Intrusion prevention goes one step further.  It involves stopping detected potential threats and incidents from occurring.  A system having both features is called an intrusion detection and prevention system (IDPS).

 

Benefits

An Intrusion detection and prevention system:

 

  • Helps to identify the source and reason for an attack
  • Installing IDPS in an organisation’s network confers some benefits to the organisation.  It becomes much easier to identify source and reason for an attack and to streamline security audits.  In particular, IDPS helps to expose unauthorised software running on the network.  IT staff become aware of all non-business network activities, making it easier to enforce security policies.  For companies that cannot afford a large IT security staff, an IDPS can serve as a substitute

 

Vendors and Products

 
Security