Advertisement
Promo

Network management Toolkit in association with http://ad.doubleclick.net/clk;217618582;14453422;e?http://www.citrix.com/lang/English/lp/lp_1688615.asp

Vital intrusion detection

Michael Mullins

Published: 15 May 2002 14:49 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Intrusion detection is vital because it is impossible to keep pace with every threat and vulnerability in a network, yet 60 percent of respondents to a recent NetAdmin poll said they have yet to implement one.

Intrusion detection is vital because it is impossible to keep pace with every current and potential threat and vulnerability in a network. These threats and vulnerabilities advance at lightening speed, and it takes time for vendors to catch up with patches and updates (and for admins to apply the updates).

Once you decide you need an IDS, you must answer these four questions:

  • How can I use an IDS to benefit my security strategy?
  • What technologies are available to me?
  • Where do I deploy the technology?
  • How do I manage the information an IDS will provide?


Figure A

How can I use an IDS to benefit my security strategy?

An IDS is used to detect intruders to your network. I define intruders as individuals or groups that attempt to access or deny access to data. This would include both internal and external threats. When properly deployed, this tool will identify intruders' methods and provide an intelligent alert to the threat. Some IDS programs will even respond to stop the intrusion. A good IDS should support analysis to find out how the intruder got in and deny any similar exploitation in the future.

What technologies are available to me?

IDS sensors can be categorised into three main groups:

  • Host based -- These are deployed on a single host and monitor packets directed at that system or processes inside the host.
  • Network based -- These use network cards in promiscuous mode and analyze all packets on the network segment. Depending on the area of deployment and the topology of your network, this sensor will monitor multiple systems or the entire network.
  • Hybrid -- This is a mixture of network- and host-based sensors.

Let's take a closer look at the network-based IDS and break it down further into two subcategories: appliances and software-based IDS.

Next

Previous

1 2


  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
113 out of 233 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:
















Related Citrix Resources

Achieving the lowest server virtualization TCO

Consolidation through server virtualization is a powerful agent for datacenter change, but...

Achieving the lowest server virtualization Total Cost of Ownership

Consolidation through server virtualization is a powerful agent for datacenter change, but...

Citrix XenDesktop: The Best Desktop Delivery System For Today's Demanding Business Needs

Whether you're considering your first virtual desktop solution or trying to salvage an existing...

Desktop Virtualization: A buyer's checklist

Desktop virtualization should do more than just move desktop management to the datacenter—its real...

Five reasons why you need Citrix Essentials for Hyper-V now

This paper explores common challenges associated with server virtualization deployments and the...

See All White Papers

Video icon

Video

On The Road Blog

This Crap Site

How utterly stupid - I am ranked #40 in the top 100 - as a member of this site..... I mean HOW utterly stupid.... I have done sweet FA, I have only rejoined this site after a 3 or... More

Post a comment

Microsoft Security Update: November Pa...

Apologies for this late update to our core Patch Tuesday update. Here is a summary of the update .... The November Patch Tuesday update from Microsoft follows the largest patch and... More

Post a comment

Mobile apps to get pushy, have presenc...

Most of the time, computers sit there waiting for you to ask them to do something. Phones tell you when they have something you care about. Most smartphones are more like a computer... More

Post a comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters