Network Security White Papers
Host-Based Intrusion Detection Systems
Overview Host-based Intrusion Detection Systems can be used to determine if a system has been compromised and can warn administrators if that happens. This paper recognizes four different methods of host-based intrusion detection: filesystem monitoring, logfile analysis, connection analysis and kernel-based intrusion detection. Implementations of intrusion detection systems generally use one of these four methods to detect intrusions. This paper has studied multiple implementations, determined their features, ways of evading their restrictions and ways to prevent evasion. The paper has also given insight into the reasons why certain systems should or should not be used and to what extent, based on their effectiveness and ease of configuration and maintenance.
| Publisher | University of Amsterdam | File Format | |
|---|---|---|---|
| Date Published | February 2005 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 1 out of 2 users found this white paper useful
White Paper RSS
Download
Register
