Karteikarten
NETWORK SECURITY | NETWORK SECURITY DEVICES | Network Intrusion Detection and Prevention
Karten in diesem Stapel (9)
- 1Plays a role in the defense of networks against hackers Monitors network traffic for malicious activityIntrusion detection and prevention systems
- 2Give 4 examples of Intrusion Detection systems malicious activitySQL injection
Unusual login
Malformed packets
Botnet traffic - 3Identify situation and alert administrators to suspicious activity Requires monitoring and taking appropriate actionIntrusion Detection systems
- 4Block suspicious activity automaticallyIntrusion Prevention systems
- 5Intrusion Prevention systems uses what 2 techniques to identify suspicious trafficSignature detection
Anomaly detection - 6Contains large databases with patterns of malicious activity Alerts administrators to traffic matching signatures Fail to detect brand new attacks Reduce false positive ratesSignature detection
- 7Build models of normal activity Alerts administrators to activity not matching the model Detects previously unknown attacks Increase false positive ratesAnomaly Detection
- 8What is this an example of? a user who normally connects to the VPN from home during the early evening hours, is suddenly connecting from Asia in the middle of the night.Anomaly Detection
- 92 Other names for anomaly detectionBehavior detection
Heuristic approaches
Informationen
- Beschreibung
- 1. Switches and Routers | 2. Firewalls | 3. Load Balancers, proxies, and web security gateways | 4. VPNs and VPN concentrators | 5. Network intrusion detection and prevention | 6. Protocol analyzers | 7. Unified threat management
- Erstellt von
- Kimberly Stover
- Aufrufe
- 0
- Verlauf
-
- Erstellt von Kimberly Stover · 14 Feb 2017
- Kopiert von Kimberly Stover · 14 Mär 2017
- Kopiert von Kimberly Stover · 17 Mär 2017
- Bewertung