Question

Using a Web browser, search on the term intrusion prevention systems. What are the characteristics of an IPS? Compare the costs of a typical IPS to an IDPS. Do they differ? What characteristics justify the difference in cost, if any?

Answer 1

Intrusion Prevention Systems(IPS) characteristics are-

1. It is used for network security.

2. It monitors the network for any threat ,collects information about the threat and tries to prevent it. Therefore it helps stop the attack.

3. It can prevent DoS attack, DDoS attack, worms ,viruses etc.

4.There are 4 types of IPS-

a.NIPS(Network Based Intrusion Prevention Systems)- Monitoring the network for any threat.

b.HIPS(Host Based Intrusion Prevention Systems)-It reports the threats that occur in a host.

c.WIPS( Wireless Intrusion Prevention Systems)-It checks a wireless network for any threat.

d.NBA(Network Behaviour Analysis)-It prevents DoS ,DDoS attack, worms ,viruses etc.

5. There are 3 threat detection methods-

a.Signature based-It tries to match a threat with predefined signatures of network attacks.

b.Anomaly based-Whenever an anomaly is detected an alarm is raised if base rules are violated.

c.Policy based-If a security policy is violated then an alarm is raised here.

IPS is also known as IDPS(Intrusion Detection and Prevention Systems) so there is no difference in cost.