Intrusion Detection Systems

Intrusion detection systems (IDS) are used to determine whether security has been breached and unauthorized access granted to property, resources or data. Examples of perimeter-based intrusion detection systems include buried differential-pressure systems, fence-mounted detection systems, infrared (IR) beam systems, stressed-wire fences, and microwave barriers. Intrusion detection (ID) products that provide perimeter security include both equipment, hardware and software components. They can be used to protect oil fields, prisons, nuclear power plants, chemical processing facilities, embassies, government offices, military bases and archeological sites. There are two broad applications areas: systems for network systems and systems for property and personnel. Intrusion detection systems for computer networks are used to identify security breaches, prevent external attacks, and stop the internal misuse of resources. Pattern-matching detection and statistical anomaly detection are the most common techniques.

Intrusion detection systems (IDS) for computer networks differ in terms of features. Misuse detection systems compare information to a database of attack signatures to determine whether a potential threat is documented. Anomaly detection systems compare monitored network segments to baseline values for network load, protocol and packet size. Network-based intrusion detection systems (NIDS) are designed to detect malicious packets that can thwart firewalls. Host-based intrusion detection systems examine the activity on individual computers. Passive systems are used to detect security breaches, log data, and signal alerts. By contrast, reactive systems respond to suspicious activities by terminating a user’s session or reprogramming firewalls to block network traffic from specific IP addresses or domains.

There are many types of intrusion detection systems (IDS) for perimeter security. Passive systems detect radiant energy or changes in an existing infrared, seismic, or magnetic field. Active systems radiate beams of infrared light or radio frequency (RF) signals to create a detection field which, when interrupted, causes an alarm to sound or an annunciator to display. Visible systems such as fences can deter potential intruders and lower maintenance costs. Covert systems are more expensive than exposed ones, but hide the features of the intrusion detection system. Line of sight systems require an unobstructed view from the origin of the detection field to its termination. Examples include bi-static microwave, mono-static microwave, active infrared, and passive infrared systems. Terrain-based products include buried sensors, sensor fences, fence-mounted sensors, and RF sensors. Volumetric intrusion detection systems create a three-dimensional detection field that is difficult to defeat. Examples include microwave, passive IR, electric field, and video motion products. Linear detection systems require less physical space, but are easier to defeat by bridging or bypassing. Examples include fence-mounted products, strain-sensitive sensors, and sensor fences.

• Cisco Security Professional's Guide to Secure Intrusion Detection Systems
  Cisco Security Professional's Guide to Secure Intrusion Detection Systems This book includes complete coverage of the Cisco Secure Policy Manager (CSPM), as well as step-by-step instructions for...
  (read more)
• Snort 2.0 Intrusion Detection
  Snort 2.0 Intrusion Detection This is the first book dealing with the Snort IDS, one of the fastest-growing Intrusion Detection Systems. The text provides valuable insight into the code base of...
  (read more)
• Non-Invasive Roof Leak Detection Using Infrared Thermography
  Roof leaks are typically discovered by direct observation. If the roof sheathing is not visible from below, such as in an attic, the wallboard or ceiling covering must first be removed. This removal...
  (read more)

Pages: 1 - 3 of 761