Intrusion Detection

Front 1

Defined as a system that monitors a network and scan it.

Back 1

Intrusion Detection and Prevention System ( IDPS )

Front 2

only monitors and alerts bad traffic

Back 2

IDS

Front 3

Take automated course of action to prevent possible incidents.

Back 3

IPS

Front 4

also gives the security team birds eye view of the traffic flowing through its network.

Back 4

IDS-IPS

Front 5

monitor entire networks segments for malicious traffic. This is usually done by analyzing protocol activity.

Back 5

NETWORK-BASED INTRUSION PREVENTION SYSTEM ( NIPS )

Front 6

usually deployed at network boundaries behind firewalls routers and remote access.

Back 6

NIPS — NETWORK-BASED INTRUSION PREVENTION SYSTEM

Front 7

monitor wireless networks by analyzing wireless networking specific protocols.

Back 7

Wireless Intrusion Prevention System ( WIPS )

Front 8

deployed within the wireless network and in areas that are susceptible to unauthorized wireless networking.

Back 8

WIPS — Wireless Intrusion Prevention System

Front 9

analyze deviations in protocol activity, network behavior analysis systems identify threats by checking for unusual traffic patterns.

Back 9

NETWORK BEHAVIOR ANALYSIS ( NBA )

Front 10

are deployed in an organization's internal networks and at points where traffic flows between internal and external networks.

Back 10

NBA — NETWORK BEHAVIOR ANALYSIS SYSTEM

Front 11

differ from the rest in that they're deployed in a single host.

Back 11

HOST-BASED INTRUSION PREVENTION SYSTEM ( HIPS )

Front 12

traffic flowing in and out of that particular host by monitoring running processes

Back 12

HIPS — HOST-BASED INTRUSION PREVENTION SYSTEM

Front 13

These tools continuously monitor network traffic and systems for signs of malicious activity, allowing for rapid response to security threats.

Back 13

REAL-TIME MONITORING

Front 14

IDPS tool should allow users to enforce intrusion rules.

Back 14

INTRUSION RULES ENFORCEMENT

Front 15

Another important feature of IDS tools is maintaining detailed logs.

Back 15

Activity Logs and Insights

Front 16

Immediately identify a malicious presence as soon as it is felt within the network.

Back 16

MALICIOUS PRESENCE DETECTION

Front 17

The IDS tools should block intruders and mitigate the damage they cause.

Back 17

MALICIOUS PRESENCE BLOCKING

Front 18

single service or computer on a network that is configured to act as a decoy attracting and trapping would be attackers.

Back 18

HONEYPOTS

Front 19

TWO PRIMARY TYPES OF HONEYPOTS

Back 19

— PRODUCTION HONEYPOTS

— RESEARCH HONEYPOTS

Front 20

serve as decoy system inside fully operating networks and servers often as part of an intrusion detection system ( IDS )

Back 20

PRODUCTION HONEYPOTS

Front 21

Used for educational purposes and security enhancement.

Back 21

RESEARCH HONEYPOTS

Front 22

honeypots can also be viewed in another dimension based on interaction levels.

Back 22

1. LOW INTERACTION HONEYPOTS

2. MEDIUM INTERACTION HONEYPOTS

3. HIGH INTERACTION HONEYPOTS

Front 23

This class gives the attackers some small insights and network control.

Back 23

LOW INTERACTION HONEYPOTS

Front 24

This model allows relatively more interaction with hackers unlike the low interaction ones.

Back 24

MEDIUM INTERACTION HONEYPOTS

Front 25

are decoy network containing collections of honeypots in highly monitored networks.

Back 25

HONEYNETS