Question

differentiate between the different types of intrusion detection systems and explain their uses. Describe optimum locations for IDS on a corporate TCP/IP network and explain how IDSs can be used to complement firewalls.

Answer 1

Solution:

_________________________________________________________________________________

different types of intrusion detection systems :-

Network intrusion detection system (NIDS)
Host-based intrusion detection system (HIDS)
Perimeter Intrusion Detection System (PIDS)
VM primarily based Intrusion Detection System (VMIDS)
Uses:-

A firewall is associate intrusion detection mechanism. Firewalls square measure specific to associate organization’s security policy. The settings of firewalls is altered to createpertinent modification to the firewall practicality.
Firewalls also can block email services to secure against spam.
Firewalls square measure wonderful auditors. Given lots of disk or remote workcapabilities, they will log any and every one traffic that passes through.
---------------------------------------------------------------------------------------------------------------------
--> Firewalls cannot answer malicious activity; they see solely host addresses, network addresses, and ports, then either permit or deny connections. IDSs do answer malicious activity, however i have not seen associate IDS that deals with network control higherthan a firewall will.

--> Some IDSs can respond by making economical, pertinent, and accurate security-event reports that usually embody totally different warning levels. additionally to security-event reports, some IDSs also can kill the association, log the session, alarm through visual alarms, and remote notification via email or pager messags