Help
Knowledge Base
FAQ
Glossary
Contact

IDS / Intrusion Detection Systems


ID stands for Intrusion Detection, which is the art of detecting inappropriate, incorrect, or anomalous activity. ID systems that operate on a host to detect malicious activity on that host are called host-based ID systems, and ID systems that operate on network data flows are called network-based ID systems.

Sometimes, a distinction is made between misuse and intrusion detection. The term intrusion is used to describe attacks from the outside; whereas, misuse is used to describe an attack that originates from the internal network. However, most people don't draw such distinctions.

The most common approaches to ID are statistical anomaly detection and pattern-matching detection.





Search:




How would you rate the quality of this content?

12345
Poor  Outstanding

Tell us why you rated the content this way.


Current rating: 2.00


12345