Friday, January 31, 2014

IDS and IPS

IDS (Intrusion Detection System) functions like an un-armed security guards.  It detects anomalies and sounds of an alarm.  It is not able to change  the policies or stop the attack.

IPS (Intrusion Protection System) functions like a patrolling constable.  It can take action to stop the attack such as denying a process to access system resources or drop packet sent to a port.

No comments: