Basic tools

• Enterprise systems: Cisco Safe and IDS, Symantec Intrusion Protection, CA Host-based IPS, Network Intrusion- Prevention Systems, Others.

• Honeypots: Honeyd Virtual Honeypot and Deception ToolKit

• Snort: open source, from PCs to large networks; for Linux/UNIX, Windows, Macs.

• References

  • Infosyssec IDS FAQ
  • SANS IDS FAQ
  • SANS InfoSec Reading Room: Intrusion Detection
  • WindowsSecurity.com: Intrusion Detection Systems (IDS): Classification; methods; techniques

Previous slide

Next slide

Back to first slide

View graphic version