Intrusion Prevention System
Intrusion prevention systems (IPS), also known as intrusion detection and prevention systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about said activity, attempt to block/stop activity, and report activity.
Intrusion prevention systems are considered extensions of intrusion detection systems because they both monitor network traffic and/or system activities for malicious activity. The main differences are, unlike intrusion detection systems, intrusion prevention systems are placed in-line and are able to actively prevent/block intrusions that are detected. More specifically, IPS can take such actions as sending an alarm, dropping the malicious packets, resetting the connection and/or blocking the traffic from the offending IP address. An IPS can also correct Cyclic Redundancy Check (CRC) errors, unfragment packet streams, prevent TCP sequencing issues, and clean up unwanted transport and network layer options.
Read more about Intrusion Prevention System: Classifications, Detection Methods
Famous quotes containing the words prevention and/or system:
“... if this world were anything near what it should be there would be no more need of a Book Week than there would be a of a Society for the Prevention of Cruelty to Children.”
—Dorothy Parker (1893–1967)
“We recognize caste in dogs because we rank ourselves by the familiar dog system, a ladderlike social arrangement wherein one individual outranks all others, the next outranks all but the first, and so on down the hierarchy. But the cat system is more like a wheel, with a high-ranking cat at the hub and the others arranged around the rim, all reluctantly acknowledging the superiority of the despot but not necessarily measuring themselves against one another.”
—Elizabeth Marshall Thomas. “Strong and Sensitive Cats,” Atlantic Monthly (July 1994)