Intrusion Detection System - Limitations

Limitations

  • Noise can severely limit an Intrusion detection system's effectiveness. Bad packets generated from software bugs, corrupt DNS data, and local packets that escaped can create a significantly high false-alarm rate.
  • It is not uncommon for the number of real attacks to be far below the false-alarm rate. Real attacks are often so far below the false-alarm rate that they are often missed and ignored.
  • Many attacks are geared for specific versions of software that are usually outdated. A constantly changing library of signatures is needed to mitigate threats. Outdated signature databases can leave the IDS vulnerable to new strategies.

Read more about this topic:  Intrusion Detection System

Famous quotes containing the word limitations:

    “Much of what contrives to create critical moments in parenting stems from a fundamental misunderstanding as to what the child is capable of at any given age. If a parent misjudges a child’s limitations as well as his own abilities, the potential exists for unreasonable expectations, frustration, disappointment and an unrealistic belief that what the child really needs is to be punished.”
    —Lawrence Balter (20th century)

    “The limitations of pleasure cannot be overcome by more pleasure.”
    —Mason Cooley (b. 1927)

    “The only rules comedy can tolerate are those of taste, and the only limitations those of libel.”
    —James Thurber (1894–1961)