Horemu at 12:25, 25 April 2011

2011-04-25T12:25:42Z

Davide.poletto: A summary about IDS added

2007-10-26T17:06:02Z

A summary about IDS added

New page

<div class="breadcrumb">
{{up}} [[Glossary]]
</div>

'''IDS''' = '''I'''ntrusion '''D'''etections '''S'''ystem

== Explanation ==

'''I'''ntrusion '''D'''etection '''S'''ystem ('''IDS''') commonly designates an active/passive detection system used to detect suspect or malicious software events that could compromise the security and integrity of a computer system or a computer network: this happens by identifying Heuristics and Patterns (often known as Signatures) of common computer/network attacks such:

* Networks/Hosts attacks against vulnerable services
* Data driven attacks on applications
* Host based attacks such as:
** privilege escalation
** unauthorized logins
** unauthorized access to sensitive files
** Malware/Spyware injection (Viruses, Trojan Horses or Worms)

If IDS has the ability to detect and pro-actively to react against detected suspicious events it belongs to the Intrusion Prevention System family.

An IDS is composed of several components:

* ''Sensors'' which generate security events
* ''Console'' to monitor events and alerts and control the sensors
* ''Security Engine'' that records events logged by the sensors in a database and uses a system of rules to generate alerts from security events received.

There are several ways to categorize an IDS depending on the type and location of the Sensors and the methodology used by the Security Engine to generate alerts: in many simple IDS implementations all three components could be combined in a single device or appliance.

== Erläuterung ==

== See also / Siehe auch ==

* {{wp|en|Intrusion detection system}}

[[Category:Definition]]

← Older revision		Revision as of 12:25, 25 April 2011
Line 1:		Line 1:
−	~~<div class="breadcrumb">~~	+	{{Breadcrumb\|0\|0\|Glossary}}
−	{{up}} ~~[[Glossary]]~~
−	~~</div>~~

	'''IDS''' = '''I'''ntrusion '''D'''etections '''S'''ystem		'''IDS''' = '''I'''ntrusion '''D'''etections '''S'''ystem

IDS - Revision history

Horemu at 12:25, 25 April 2011

Davide.poletto: A summary about IDS added