From the course: Protecting Your Network with Open Source Software

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

What is an IDS?

What is an IDS?

From the course: Protecting Your Network with Open Source Software

Start my 1-month free trial

What is an IDS?

- [Instructor] An Intrusion Detection System, or IDS, provides an ability to receive an alert when an attacker breaches your network security. Therefore, IDS is critical in protecting your network. An IDS comes in as either an appliance or a piece of software. An appliance is a standalone solution. It's a physical box you can attach to your network without having to touch anything else. IDSs monitor networks for suspicious activities and send alarms. IDSs are passive, meaning they don't take any actions against the network traffic. There are different types of IDSs. The first type is signature based. The signature-based IDSs rely on a predetermined set of definitions characterizing various types of attack traffic. In this case, a definition refers to a bit pattern of network traffic. The second type is behavior-based IDSs, the behavior-based IDSs determine what's normal and what's not in terms of network activities.…

Contents