IDS and IPS (Intrusion Detection and Prevention)

An Intrusion Detection System (IDS) monitors network traffic or a host for signs of attack and raises alerts. An Intrusion Prevention System (IPS) sits in the path of the traffic and can block malicious packets automatically.

Both detect attacks by signatures (patterns of known attacks) or by anomalies (behaviour that differs from normal). Network-based versions (NIDS/NIPS) watch traffic on the network; host-based versions (HIDS) watch a single server's files, logs and processes. Snort and Suricata are well-known open source options, and many modern firewalls include IPS features.

Authentication vs Authorization Brute Force Attack CSP (Content Security Policy)CSRF (Cross-Site Request Forgery)DDoS Attack Digital Signature Encryption End-to-End Encryption (E2EE)Hashing JWT (JSON Web Token)Malware Man-in-the-Middle (MITM) Attack

IDS and IPS (Intrusion Detection and Prevention)

More in Security