A Survey of Intrusion Detection & Prevention Techniques
Usman Asghar Sandhu, Sajjad Ali Haider, Salman Naseer, Obaid Ullah Ateeb, Shaheed Zulfiqar, Ali Bhutto · 2011
Network security is a large and growing area of concern for every network. Most of the network environments keep on facing an ever increasing number of security threats in the form of Trojan worm attacks and viruses that can damage the computer system and communication channels. Firewalls are used as a security check point in a network environment but still different types of security issues keep on arising. In order to further strengthen the network from illegal access the concept of Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) is gaining popularity. IDS is a process of monitoring the events occurring in a computer system or network and analyzing them for sign of possible incident which are violations or imminent threats of violations of computer security policies or standard security policies. Intrusion Prevention System (IPS) is a process of performing intrusion detection and attempting to stop detected possible incidents. This study aims to identify different types of Intrusion Detection and Prevention techniques discussed in the literature.