作者: Karen Scarfone , Peter Mell
DOI: 10.1007/978-3-642-04117-4_9
关键词:
摘要: Intrusion detection is the process of monitoring events occurring in a computer system or network and analyzing them for signs possible incidents, which are violations imminent threats violation security policies, acceptable use standard practices. An intrusion (IDS) software that automates process. prevention (IPS) has all capabilities an IDS can also attempt to stop incidents. IPS technologies offer many same capabilities, administrators usually disable features products, causing function as IDSs. Accordingly, brevity term systems (IDPSs) used throughout rest this chapter refer both technologies. Any exceptions specifically noted.