Describe the term intrusion detection in the context of IT-
security?
Answers were Sorted based on User's Feedback
Answer / vik
Intrusion Detection refers to pro-active monitoring of a
network for unauthorized access as defined by the security
policy. It uses known patterns, of attacks, looks at
signatures, and can check against a known database of sites.
IDS features are built into many of the new Integrated
Security Appliances by vendors like Cisco, Juniper, etc.
Newer firewall vendors like Palo Alto networks are
integrating many features into the firewalls that overlap
with an IDS. Snort is a free IDS that has been available
for years. It is great- if you have some in house IT expertise.
IDS is often listed with IPS- Intrusion Prevention Systems.
| Is This Answer Correct ? | 7 Yes | 1 No |
Answer / ash10
IDS detect the threats by watching for trends, looking for
attacks that uses particular patterns of messages, and
other factors.
| Is This Answer Correct ? | 4 Yes | 1 No |
Answer / s.m.feroz ahmed
Hi,
Intrusion Detection is defined as whenever an Attack is
happening the work of IDS is just to Detect an Attack and
cannot stop the Attack in terms of Firewall an attack is
detected by IDS and keeps a copy of that packet in state
table and allows to enter into Network,So to overcome this
attack one should make use of IPS Intrusion Prevention
System which not only detects an attack but also stops an
Attack.
| Is This Answer Correct ? | 0 Yes | 1 No |
Answer / vinay
it means someone tried to hack the security of the network.
| Is This Answer Correct ? | 1 Yes | 5 No |
If you need to encrypt and compress data for transmission, how would you achieve it?
What is cybersecurity?
What are the possible means of Internet attacks?
What is Imaging/ghosting?
What protocol is used by DNS name servers
Explain the difference between discretionary access control and mandatory access control?
What is difference between arp & rarp? How both of these protocols will work, and where it will use?
What are the types fo ddos attacks?
What protects and describes the Chinese Wall model?
explain how do we do authentication with message digest(md5)? (Usually md is used for finding tampering of data)
What is an arp and how does it work?
What are worms?