IPS and IDS Defined by Eric Rivers

Intrusion Prevention Systems (This is detection and taking action)

Intrusion prevention systems (IPS), also known as intrusion detection and prevention systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity.

Key Points about IPS

1) Detects malicious activity

2) Gathers data about malicious activity and reports to IT (Logging & Reporting)

3) It takes action(prevents)against malicious activity

Intrusion Detection Systems (This is only detection)

An intrusion detection system (IDS) is a device or software application thatmonitors network or system activities for malicious activities or policy violations and produces reports to a management station. IDS come in a varietyof “flavors” and approach the goal of detecting suspicious traffic in differentways.

Key Points about IDS

1) Detects malicious activity

2) Gathers data about malicious activity and reports to IT (Logging & Reporting)

Created on August 29, 2015 by Lionel Sharpe || Professor Eric Rivers 3:04 AM

Form (rr15a) Code:3301627005-GA

Form (rr15b) Code:3301627006-NJ

Form (rr15c) Code:3301627007-FL