Intrusion Prevention System

Intrusion Prevention System

Intrusion prevention systems (IPS), also known as intrusion detection and prevention systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about said activity, attempt to block/stop activity, and report activity.

Intrusion prevention systems are considered extensions of intrusion detection systems because they both monitor network traffic and/or system activities for malicious activity. The main differences are, unlike intrusion detection systems, intrusion prevention systems are placed in-line and are able to actively prevent/block intrusions that are detected. More specifically, IPS can take such actions as sending an alarm, dropping the malicious packets, resetting the connection and/or blocking the traffic from the offending IP address. An IPS can also correct Cyclic Redundancy Check (CRC) errors, unfragment packet streams, prevent TCP sequencing issues, and clean up unwanted transport and network layer options.

Read more about Intrusion Prevention SystemClassifications, Detection Methods

Other articles related to "system, intrusion prevention systems, intrusion prevention system":

IBM Internet Security Systems - Products
... Secure Log Manager Server Sensor Site Protector System Scanner Currently supported products include Endpoint Secure Control Enterprise Scanner Internet Scanner IBM Open Signatures IBM Security ...
Rogue Access Point
... rogue access points, organizations can install wireless intrusion prevention systems to monitor the radio spectrum for unauthorized access points ... A wireless intrusion prevention system facilitates the job of auditing these access points on a continuous basis to learn whether there are any rogue access points among them ... positive (crying wolf) occurs when the wireless intrusion prevention system detects an access point not actually connected to the secure network as wired rogue ...
Intrusion Prevention System - Detection Methods
... The majority of intrusion prevention systems utilize one of three detection methods signature-based, statistical anomaly-based, and stateful protocol analysis ... A signature-based intrusion prevention system monitors the network traffic for matches to these signatures ... Once a match is found the intrusion prevention system takes the appropriate action ...

Famous quotes containing the words system and/or prevention:

    Such is the remorseless progression of human society, shedding lives and souls as it goes on its way. It is an ocean into which men sink who have been cast out by the law and consigned, with help most cruelly withheld, to moral death. The sea is the pitiless social darkness into which the penal system casts those it has condemned, an unfathomable waste of misery. The human soul, lost in those depths, may become a corpse. Who shall revive it?
    Victor Hugo (1802–1885)

    ... if this world were anything near what it should be there would be no more need of a Book Week than there would be a of a Society for the Prevention of Cruelty to Children.
    Dorothy Parker (1893–1967)