Intrusion Detection Research Paper

Submitted By ITLabs
Words: 1108
Pages: 5
Open Document
Intrusion Detection
Information Technology security is an enormous part of today’s infrastructure protection and sustainment, and can be described as any activity that protects the usability reliability, integrity and welfare of your network and information. Intrusion detection is an immensely important measure of IT security and can help in the protection of your assets. Intrusion detection can be easily described as a category of security management system for computers and networks. An intrusion detection system or (IDS), is a system that gathers and analyzes information from designated regions within an organizations computer systems or networks in order to identify possible breaches in security. Breaches include both intrusions by external threats of the organization, and misuse of access inside the association. IDS’ perform vulnerability assessments, which is a scanning system developed to evaluate computer or network security. IDS are a very important part of today’s security scene because of the growing number of attacks on both civilian and military networks around the world. IDS are not just one dimensional either; they come in many shapes and sizes to conform to specific organizational needs.
The main problem with today’s infrastructure systems is that they are all subject to electronic attacks by anyone and everyone with the means and motive to attack. There are multiple vulnerability assessment tools, and other intrusion tools, that can be found on the internet both for personal and commercial uses. The problem is that anyone can get a hold of these tools and use them in a destructive way for multiple reasons to attack a network. A few examples of tools that are used to scan and identify vulnerabilities are Nmap, SubSeven, L0ftCrack, BackTrack, BackOrifice. Some programs even have the ability to take advantage of weaknesses found and penetrate systems with attacks. While these are mainly created for ethical use, they are far too often used to reach unethical ends. Pretty much all organizations have firewalls in place to protect unauthorized access to infrastructure systems, but sometimes firewalls cannot completely keep out all intruders. This is where the IDS comes in and gives another layer of protection for an organization’s systems. With different system needs in different environments, multiple types of IDS are available. The two main types are host intrusion detection systems, and network intrusion detection systems. These two distinct setups can have different styles of detecting infractions. A few examples can be signature based, anomaly based, passive systems, and reactive systems.
Network Intrusion Detection Systems (NIDS) are described as devices positioned at tactical point(s) within a network, to monitor traffic between devices in the network. In a perfect situation, you would be able to scan and monitor all incoming and outgoing traffic in which packets are analyzed that are disguised to be overlooked by firewalls. The only downside of a setup like this is that a bottleneck effect can be created and slow down traffic, both inbound and outbound. Host intrusion detection systems (HIDS) are essentially perform in the same way with one major difference, HIDS run on individual hosts and computer systems. A HIDS will then alert security administrators when suspicious activity has occurred with the host.
Once a NID or a HID is chosen, we can look at signature and anomaly based intrusion detection systems, which will decide how the threats are monitored and found within the systems. Signature based IDS’ monitor traffic and compares them to a built in catalog of specific signatures, or traits, from known malevolent attacks. This works very similar to many anti-virus programs when detecting malware in devices. The main problem with using a signature based IDS is that there will be latency between discovering a new threat and the IDS detecting and applying new policies to
Show More

Related Documents: Intrusion Detection Research Paper

Security Threats And Security

Risk Assessment 3 Likelihood Estimation 3 Severity Estimation 3 Figure 1 4 Impact 5 Figure 2 5 Mitigation Strategies 5 Law 6 International Scope 6 CONCLUSION 7 REFERENCES 7 INTRODUCTION The main theme of this assignment is about the security threats and security vulnerabilities. Countless to minor corporations are being attacked by hackers to steal data and to crash frameworks. Another bug came into lime light on the 7th of April 2014 named as "Heartbleed". On the 8th of April a Major corporation…

Words 1642 - Pages 7

Security: Security and Information Essay

that is an intentional or unintentional attempt to cause damage or compromise to the information and/or the systems that support it. Control, Safeguard, or Countermeasure - security mechanisms, policies, or procedures that can successfully counter attacks, reduce risk, resolve vulnerabilities, and otherwise improve the security within an organization. Exploit - to take advantage of weaknesses or vulnerability in a system. Exposure - a single instance of being open to damage. Hack - Good:…

Words 1032 - Pages 5

Outsourcing Security

I would like to choose outsourcing security because the guaranteed benefits of outsourced security are so attractive and the possible risks of outsourcing are considerable. Outsourcing of information systems function has become a regularly picked alternative of providing information services. Outsourcing is a practice used by a different company to reduce costs by transferring portions of work to outside supplier rather than completing it internally. According to McMillan in his article The Benefits…

Words 1156 - Pages 5

UNB Security

UNB Security is tasked with the safety and protection of students at the University of New Brunswick. Included in the security team’s responsibilities is to respond to incidents on campus, relating to harassment, discrimination, assault, sexual assault, and improper conduct. This team’s role is intervention and prevention of incidents, as well as investigation and prosecuting those who commit violations to UNB’s rules and policies. The current rules and standards for dealing with issues brought before…

Words 1310 - Pages 6

The Concept Of Security

Security is protecting something or keeping something safe. One of my battle buddies didn’t put up a tool today so he didn’t keep good security on it. Even though we told him to make sure he put it up. The definition of "security" depends on one's perspective. At the simplest level, security may be defined as "the quality or state of being secure, "freedom from danger," or "freedom from fear or anxiety." Of the many other levels on which one can analyze security, the most relevant here are individual…

Words 1023 - Pages 5

It Security Essay

Computer security and Network Security is the means by which business and governments are protecting against computer intrusions and attack to prevent loss of data, information and provided services. Everything is now on computers, peoples whole lives are documented on computers. Big business and the government rely on technologies that use computers, whether it is used for storage, a medium between the customers and themselves or actual work. With all this information and data being stored, transferred…

Words 1957 - Pages 8

Security In The Cloud

Security in the Cloud: solutions comparison to solve data storage in the public cloud Cristian Montero - cmontero (647640) Elisa Mena - emena (633144) Santiago Villagomez - svillagomez (649887) COMP90043 Cryptography and Security September 12, 2014 1 Aims The main contribution of this paper is to describe possible threats in cloud computing environments as well as security solutions using cryptography. To accomplish our main aim we define three specific objectives which are described as follows:…

Words 571 - Pages 3

Security With Encryption

Security with Signcryption Clayton Kobeda 4/10/2014 Abstract: Signcryption is a recently newer technology that is still in the process of being developed and made completely efficient. The purpose is to take the previous sign then encrypt method but by killing two birds with one stone. The technology is a scheme which can produce secret and authenticated messages sent between different parties. This method is created to sign and encrypt a message or packet in one step saving computational cost…

Words 1673 - Pages 7

Homeland Security

Concepts of Homeland Security and Homeland Defense Homeland defence refers to a country’s efforts to ensure the sovereignty of its state (s) through protection from the external invaders (Relyea, 2002). In the US the concept is mostly driven by the military and the department of defence. The department of defence is committed to the increased international alertness and enjoys the independence of the department as is the case with the judiciary of the United States. On the other hand, the term homeland…

Words 1092 - Pages 5

Loss Of Security

scene. The two women holding hands challenges this idea also because the image is focused on these two we can tell that they are thinking of each other and making sure the other is safe by holding hands so neither of them gets lost. The feeling of security is taken for granted in many places like Las Vegas where the streets are always packed with cars and people at all times. So after a concert, it is abnormal to find a completely empty street. Image 2 depicts this, however. The street has very few…

Words 580 - Pages 3