What is an intrusion detection / prevention system ?

One of the main activities within security (whether physical or logical) is monitoring. Monitoring is based on the initial definition of a series of thresholds of "normal" behavior of an object (an automatic control system, a data network, a computer, a computer program, etc.) and the subsequent comparison with its status current to detect possible anomalies at a specific time. This monitoring gives rise to a continuous feedback that will allow the activation of detective and / or corrective activities aimed at re-aligning this element within the established parameters:


As can be seen in the diagram, there are 3 functional blocks within the monitoring process:

A source of information or object to monitor, which processes, transmits or stores data
An analysis action where behavioral data from the information source will be collected and compared with the expected parameters

A response to abnormal behavior, which can be passive (alert) or active (which can modify the environment to re-align the behavior)

Under this scenario, a system that is responsible for obtaining data from a source of information, analyzing them, comparing them against predefined values ​​of behavior to detect anomalous behaviors and generating response actions is called “Intrusion detection / prevention system”, meaning “intrusion »As an unauthorized action that may compromise the security of the monitored object. Examples of intrusion detection / prevention systems can be found in physical video surveillance systems, alarms, industrial automatic control systems, etc.

In the area of ​​information security, an intrusion detection system ("Intrusion Detection System" - IDS) or intrusion prevention system ("Intrusion Prevention System" - IPS) is an element that monitors the behavior of networks, host and / or applications in search of patterns of malicious behavior, sharing the same characteristics described above, which allow cataloging them according to their operation:

Comments

Post a Comment

Popular posts from this blog

The role of managed detection and response (MDR) in the area of ​​security

For organizations that want to maximize their security strategies, but cannot fund full-time security teams, initiatives like MDR can be a viable option. Why? To facilitate the work of security teams, when creating an incident response team, it is necessary to set up an organizational structure with a policy that is applicable and mainly effective. (this section seems a little out of place) Essentially, MDR is made up of security analysts and response analysts who examine an organization's records for suspicious events. For example: proactive threat detection and analysis, including vulnerability analysis, patches, firmware updates and monitoring of intrusion prevention and detection systems (  IDS / IPS  ). After registering a malicious activity, the team will do a more in-depth analysis. MDR is then responsible for researching threats and resolving incidents. This creates a delivery process for solving the analyzed case - such as notification to the customer, threat intelli...
Read more

What is help desk for the IT sector?

Now that you understand what help desk is , let's understand why it is so cited in the IT sector The help desk is a service offered by Information Technology companies , working as a technical support for areas related to computing. Thus, the employee of the contracting company, when he has a problem, opens a call to the IT team, which solves the problem. Some common problems are: not being able to access the Internet or the company's internal network, the printer is not working, etc. The questions worked on the help desk are low complexity problems and, therefore, are also called "first level of service". The second level of service is called Service Desk and will be explained in this article, but later. What are the help desk formats? The help desk can be aimed at the company's internal public, the external public or both. In addition, it can be a function of an internal team or an outsourced company ( outsourcing ). We will better understand these different fo...
Read more

QUALITIES YOU NEED IN A HELP DESK JOB

Image
Working at help desk work area or in a help job is an incredible method to be taken advantage of the center of any business: clients and items. In an assistance work area work, you find a good pace clients, comprehend their involvement in your organization, and find a good pace item all around. It takes a specific blend of abilities, qualities, and individual attributes to truly go far in an assistance work area or bolster profession. 1. A genuine want to help individuals.  This individual works admirably in light of the fact that they really need to help other people, not on the grounds that it's "their activity". They make a solid effort to play hard, discover satisfaction in their everyday undertakings, and have energy for their job. 2. Works 'with' and not 'for' the clients.  A predominant help specialist considers the to be as an equivalent accomplice, and views themselves as an augmentation of the client's group. Relating to the client as an...
Read more