Rio's musings

This is the lesson where we learned about network intrusion detection and analysis

• HIDS= host-based intrusion detection systems
• NIDS = network intrusion detection systems
• Modes of detection
  • signature based analysis
  • protocol analysis
  • behavioral analysis
• Types oF IDSes
  • Commercial
    • Check point I{S software blade
    • NGIPS
    • Extreme NIPS
    • Tipping point IPS
  • Open source
    • NIDS
      • Snort
      • Bro
      • Suricata
      • Sagan
    • HIDS
      • OSSEC
      • Fail2Ban
      • AIDE
      • Samhain