Flashcards
NETWORK SECURITY | NETWORK SECURITY DEVICES | Network Intrusion Detection and Prevention
Cards in this deck (9)
- 1Plays a role in the defense of networks against hackers Monitors network traffic for malicious activityIntrusion detection and prevention systems
- 2Give 4 examples of Intrusion Detection systems malicious activitySQL injection
Unusual login
Malformed packets
Botnet traffic - 3Identify situation and alert administrators to suspicious activity Requires monitoring and taking appropriate actionIntrusion Detection systems
- 4Block suspicious activity automaticallyIntrusion Prevention systems
- 5Intrusion Prevention systems uses what 2 techniques to identify suspicious trafficSignature detection
Anomaly detection - 6Contains large databases with patterns of malicious activity Alerts administrators to traffic matching signatures Fail to detect brand new attacks Reduce false positive ratesSignature detection
- 7Build models of normal activity Alerts administrators to activity not matching the model Detects previously unknown attacks Increase false positive ratesAnomaly Detection
- 8What is this an example of? a user who normally connects to the VPN from home during the early evening hours, is suddenly connecting from Asia in the middle of the night.Anomaly Detection
- 92 Other names for anomaly detectionBehavior detection
Heuristic approaches
Information
- Description
- 1. Switches and Routers | 2. Firewalls | 3. Load Balancers, proxies, and web security gateways | 4. VPNs and VPN concentrators | 5. Network intrusion detection and prevention | 6. Protocol analyzers | 7. Unified threat management
- Created by
- Kimberly Stover
- Views
- 0
- History
-
- Created by Kimberly Stover · Feb 14, 2017
- Copied by Kimberly Stover · Mar 14, 2017
- Copied by Kimberly Stover · Mar 17, 2017
- Rating