Implementing Instrusion Prevention

Implementing Instrusion Prevention

1. IPS Technologies

   • IDS
     • Monitor for Attacks
   • IPS
     • Detect and Stop Attacks
     • Host-Based IPS
     • Network-Based IPS Sensors
       • Components
         • Memory
         • NIC
         • Procesor
     • Cisco Modular and Appliance Based IPS
   • Port Mirroring
   • Cisco Span

2. IPS Signatures

   • Signature File
     • Acquire
   • Signature Micro-Engines
   • Distinctive attributes
     • Action
       • Generating an Alert
       • Logging the Activity
     • Trigger
       • Honey Pot-Based Detection
       • Pattern-Based Detection
       • Anomaly-Based Detection
       • Policy-Based Detection