RangerIDS - Intrusion Detection System (IDS)

Host IDS (HIDS)

Traditional Host IDS (HIDS)

File Integrity Assessment (FIA)

Network IDS (NIDS)

Network Node IDS (NNIDS)

Intrusion Prevention Systems (IPS)

Host IPS (HIPS)

Network IPS (NIPS)

Which Technology is the Best

Problems with IDS

Detection Methods

Pattern Matching

Stateful Pattern Matching

Protocol Decode

Heuristic Analysis

Anomaly Analysis

Which Detection Method is Best

Monitor-Evaluate-Modify: The Security Cycle

Host IDS (HIDS)

This category, so often overlooked recently in the face of the more “interesting” technology of Network IDS, is seeing something of a resurgence.

This could be due partly to the fact that high speed switched networks are providing a significant obstacle to effective Network IDS implementation, or it could also be that there is a growing realization that there is more to IDS than detecting suspicious packets on the wire.

This type of product can itself be split into two main categories, with some host-based systems providing elements of both: