Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Intrusion Detection and Prevention Systems

Published

Author(s)

Karen A. Scarfone, Peter M. Mell

Abstract

Intrusion detection is the process of monitoring the events occurring in a computer system or network and analyzing them for signs of possible incidents. An intrusion detection and prevention system (IDPS) is software that automates the intrusion detection process and can also attempt to stop possible incidents. This chapter provides an overview of IDPS technologies. It explains the key functions that IDPS technologies perform and the detection methodologies that they use. Next, it highlights the most important characteristics of each of the major classes of IDPS technologies. The chapter also discusses IDPS interoperability and complementary technologies.
Citation
Handbook of Information and Communication Security
Volume
Part B
Publisher Info
Springer, New York, NY

Keywords

host security, incident handling, intrusion detection, intrusion detection and prevention, intrusion prevention, network security, wireless network security

Citation

Scarfone, K. and Mell, P. (2010), Intrusion Detection and Prevention Systems, Handbook of Information and Communication Security, Springer, New York, NY, [online], https://doi.org/10.1007/978-3-642-04117-4_9 (Accessed November 2, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created October 22, 2010, Updated November 10, 2018