Guide to Intrusion Detection and Prevention Systems (IDPS)

Intrusion detection is the process of monitoring the events occurring in a computer system or network and analyzing them for signs of possible incidents, which are violations or imminent threats of violation of computer security policies, acceptable use policies, or standard security practices. Intrusion prevention is the process of performing intrusion detection and attempting to stop detected possible incidents. Intrusion detection and prevention systems (IDPS)1 are primarily focused on identifying possible incidents, logging information about them, attempting to stop them, and reporting them to security administrators. In addition, organizations use IDPSs for other purposes, such as identifying problems with security policies, documenting existing threats, and deterring individuals from violating security policies. IDPSs have become a necessary addition to the security infrastructure of nearly every organization.

Author: U. S. Department of Commerce

Publisher: Createspace Independent Publishing Platform

Publication Date: Jan 21, 2014

Number of Pages: 128 pages

Binding: Paperback or Softback

ISBN-10: 1494749696

ISBN-13: 9781494749699