Network Security White Papers
Pretend Or Prevent? No Matter What It's Called, If a Network Security System Doesn't Shoot First and Ask Questions Later, It Doesn't Qualify As Intrusion Prevention
Overview Intrusion detection systems (IDS) and intrusion prevention systems (IPS) describe two different approaches to network security and are not interchangeable. Market demand, however, has prompted some vendors to apply the “prevention” label to systems that detect attacks but actually do nothing to stop them. To qualify as true intrusion prevention, the system must use an in-line appliance to inspect traffic at the packet level and drop offending packets before they reach the victim. Unlike security measures like firewalls or access control lists on routers, intrusion detection systems (IDS) are designed specifically to recognize attacks. The logic is clear: you cannot prevent what you cannot detect.
| Publisher | SecureWorks, Inc. | File Format | PDF, requires Acrobat Rdr 5 |
|---|---|---|---|
| Date Published | December 2003 | Downloads | 2 |
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 2 out of 4 users found this white paper useful
White Paper RSS
Download
Register
