What is the difference between intrusion detection and intrusion prevention?
Intrusion detection Systems (IDS) are an excellent security technology to augment a layered network security structure. IDS rely on pattern recognition algorithms to identify the “signature” of an intrusion attempt. The database of signatures must be updated to address new attack techniques as they are developed. Host intrusion prevention, however, uses an architecture that combines the flexibility and strength of a packet filter firewall, stateful packet inspection and, active intrusion detection. This permits CyberwallPLUS to identify and stop common attack styles and recognize new variants of these attacks.
