Week 7 Posting - IDS/IPS Network Security
Intrusion detection and intrusion prevention systems are crucial to any network security out there. They work by monitoring network traffic packets and determine whether or not the packet is good or malicious. The detection system will simply review a copy of the packet and will allow network traffic to flow normally without any latency. A prevention system will sit in the flow of traffic monitoring the packets but can cause system latency and if the prevention system goes down so does the link its monitoring. The main difference between the two systems is that the detection system needs help from other devices or humans monitoring the system to prevent the attack from becoming worse than it already is. The prevention system is able to stop the attacks directly without the need of intervention from anyone or anything else.
Comments
Post a Comment