Question

Q1: Discuss the host and network based intrusion detection system Q2: Discuss the different components of snort with the appropriate diagram Q3:Error Correction (Hamming Code) The following is a corrupted ECC data. 101101101100 Find out the actual data (after removing ECC bits). Q4: Explain Raid0, Raid1, and Raid2

Answer 1

Answer1 :

Network-based IDS:

These kinds of IDS are deliberately situated in a network to recognize any assault on the hosts of that network. To catch every one of the information going through the network, you have to position your IDS at the passage and leave purpose of information from your network to the outside world. You can likewise position a few IDS close to the vital places of your inside network, contingent upon the dimension of security required in your network. Since a network-based IDS need to screen every one of the information going through the network, it should be quick to break down the traffic and should drop as meager traffic as could be expected under the circumstances.

Host-based IDS:

They are introduced in a host and they can screen deals that are beginning and going to that specific hosts as it were. On the off chance that there are assaults in some other piece of the network, they won't be recognized by the host-based IDS.. aside from observing approaching and active traffic, a host-based IDS can likewise break down the record arrangement of a host, clients' login exercises, running procedures, information honesty and so forth a portion of the benefits of this kind of IDS are:

• They are fit for checking if an attack was effective or not, while a network-based IDS just give a signal of the attack.
• They can screen every one of clients' exercises which is preposterous in a network-based framework
• They are equipped for recognizing assaults that begin from inside the host.
• A host-based framework can dissect the unscrambled traffic to discover assault signature-in this manner enabling them to screen scrambled traffic.
• They don't require any additional equipment since they can be introduced in the current host servers.
• They are practical for a little scale network having a couple of hosts.

DEAR, PLEASE RATE THE ANSWER IF HELPS ELSE LET ME KNOW YOUR DOUBT ( HAPPY TO HELP).

KINDLY POST SEPARATELY AS WE ARE RESTRICTED TO SUBMIT ONLY ONE ANSWER AT A TIME.

THANK YOU!!!