Characterising intrusion detection sensors

摘要: An intrusion detection sensor is defined as a device that collects and analyses network traffic for the purpose of identifying suspicious events. Too often value associated with its data collection analysis features. Experience tells us such sensors fall under range different types are diverse in their operational characteristics, some which have been little studied. In this article, researchers from Cranfield York universities examine these location response, also characterise various costs sensors. A common definition an defines it ''device events''.^1 This inevitable since so many systems (IDS) designed characteristics mind. There need to appreciate they add deployments particularly system perspective. Such important if be assessed collectively opposed effectiveness individual