NIST logo

Publication Citation: Intrusion Detection and Prevention Systems

NIST Authors in Bold

Author(s): Karen A. Scarfone; Peter M. Mell;
Title: Intrusion Detection and Prevention Systems
Published: October 22, 2010
Abstract: Intrusion detection is the process of monitoring the events occurring in a computer system or network and analyzing them for signs of possible incidents. An intrusion detection and prevention system (IDPS) is software that automates the intrusion detection process and can also attempt to stop possible incidents. This chapter provides an overview of IDPS technologies. It explains the key functions that IDPS technologies perform and the detection methodologies that they use. Next, it highlights the most important characteristics of each of the major classes of IDPS technologies. The chapter also discusses IDPS interoperability and complementary technologies.
Citation: Handbook of Information and Communication Security
Publisher: Springer, New York, NY
Volume: Part B
Pages: pp. 177 - 192
Keywords: host security; incident handling; intrusion detection; intrusion detection and prevention; intrusion prevention; network security; wireless network security
Research Areas: Information Technology, Computer Security, Cybersecurity
DOI: http://dx.doi.org/10.1007/978-3-642-04117-4_9  (Note: May link to a non-U.S. Government webpage)
PDF version: PDF Document Click here to retrieve PDF version of paper (183KB)