| Javascript Feeds RSS Feed Security Dashboard | SearchSecurity.com |
|
A Thousand Heads Are Better Than One - The Present and Future of Distributed Intrusion Detection The rapid increase in worldwide Internet activity in the past half-decade has given rise to a host of new network security threats. Until recently these threats have been (more or less) successfully combated with a combination of antivirus software, firewalls, and intrusion detection systems. But the latest generation of distributed denial of service (DDoS) attacks and Internet worms has demonstrated the shortcomings of traditional host- and network-based intrusion detection systems: incomplete information and inadequate user knowledge.
04/15/2004
|
|
Distributed Intrusion Detection Systems: An Introduction and Review Intrusion Detection Systems have undergone rapid growth in power, scope and complexity in their short history. Most IDS share a similar underlying structure: agents reporting detections to a management system. Recent increases in malicious network activity worldwide have precipitated the need for IDS with global scope. These distributed Intrusion Detection Systems multiply the power of a single IDS by marrying an attack correlation engine with an database of events obtained from a large number of geographically dispersed agents. This provides a global view of existing and emerging attacks patterns and security events, allowing rapid notification and facilitating development of countermeasures.
04/15/2004
|
|
Choosing an Intrusion Detection System that Best Suits your Organization In the following pages I will delve into exactly what an IDS is. This includes the various types of IDS? on the market and approaches taken to detect intruders. I will also identify key steps an organization should undertake prior to implementing an IDS solution. Performing a risk assessment of your organization and understanding existing controls and control deficiencies is a key step in securing the organization. Implementing a tool such as this is most effective when there is a grounded understanding of the organization as a whole and the critical processes within the company. Additionally, the organization should invest time and money into developing their personnel to ensure they are appropriately equipped to utilize the tool in a manner that will make full use of the systems functionality. Finally I will take a look at various commercial IDS? on the market today and the ever-evolving functionality of this technology.
03/24/2004
|
|
Future of IDS Provides an overview of TCP/IP, covers the purpose and the history behind IDS, and current day functionality/challenges of this technology. The highlight of the paper covers how problems of today's IDS will be met in the future in terms of interoperability, responsiveness and more.
03/22/2004
|
|
Five IDS Mistakes People Make Reviews several important mistakes made by companies when planning and deploying IDS systems, including using NIDS but with limited scope, unchecked alerts, no response policy for events and more.
03/22/2004
|
|
An Introduction to Intrusion Detection Systems Intrusion detection systems, or IDSs, have become an important component in the Security Officer's toolbox. However, many security experts are still in the dark about IDS, unsure about what IDS tools do, how to use them, or why they must. This article will offer a brief overview of intrusion detection systems, including: a description of what IDSs are, the functions they serve, the two primary types of IDS, and the different methods of intrusion detection that they may employ.
03/20/2004
|
|
Intrusion Detection Primer Benjamin Thomas, an active LinuxSecurity.com contributor, puts together an Intrusion Detection Primer. It is a collection of six research summaries that outline the basics of Intrusion Detection.
02/27/2004
|
|
Intrusion Detection Systems: An Introduction Intrusion Detection is the process and methodology of inspecting data for malicious, inaccurate or anomalous activity. At the most basic levels there are two forms of Intrusion Detection Systems that you will encounter: Host and Network based.
02/27/2004
|
|
Page: 1 2 |