Intrusion Detection. - Arun Hodigere. Intrusion and Intrusion Detection. Intrusion : Attempting to break into or misuse your system. Intruders may be from outside the network or legitimate users of the network. Intrusion can be a physical, system or remote intrusion.
- Arun Hodigere
Intrusion Detection Systems look for attack signatures, which are specific patterns that usually indicate malicious or suspicious intent.
IDS based on
Policy Script Interpreter
Real time notification
Filtered Packet Stream
Tests for buffer overflow, checks the user against sensitive ids, etc
Generates event controls based on the policy
Generates Finger_request event