MARS BLOG

Let us learn together what is a intrusion detection system,the following is an article i read time search. Intrusion detection system(IDS)is an important pat of security strategies that can be defined like this :

Purpose of the intrusion detectim system is to detect unathorized acces or abuse of computer system. Intrusion detection system is a kind of search for the computer as an alarm sound and even take corective action it there is an intruder is detected intrusion. Detection schemes generally have two categories :
Anomaly detection and Detector detection
Anomaly detection as a read is looking for behaviour that deviates from the normal use of the system while the detection of the detector is to look for behaviour that match know attack serious. Much time and effort invested in intrusion detection system, here are links to sites that discuss it with some effort.

http://www.cerias.purdue.edu/about/history/coast _resources/intrusion_detection/

There are categories of sub-system is a network intrusion detection system(NIDS)system serves to monitor packets on the cable network and look for suspicious activity,the system can monitor a computer over a network.

Now clearly the purpose of this intrusion detection system and now anyone who breaks into your system?
One is those people out side the network,causing chaos to your system can also be called a hacker.

The next how the intruder got into the system?

That by using a trick tricks of the trade with a high level though a hole in the system,eventually many ways to access the system even from a disuance.

How to stop the infiltration of a person?
There are some freeware detection system/intrusion shoreware as well as commercial intrusion detection system.

Open source intrusion detection system.
Here are some open sovrce intrusion detection system :

*AIDE (http://sourceforge.net/project/aide)
*File system saint (http://sourceforge.net/project/fss) saint hort-based file sysuem that is ligh weight intrusion detection system with primary focus on speed and ease of use.
*Snort (www.snort.org)
snort is the most widely used in the world,which can prevent the open source network intrusion and detection system thau uses a rule-driven language,or simply the method of examination such as the protocol,signatures and anomalies.

Intrusion detection system commercial.
The following is a commercial detection sysuem :

*Tripwire (http://www.tripwire.com)
*Touch technology inc (poly center security intrusion detector) => http://www.ttinet.com
*Internet security system (real secure server sensor) =>http://www.iss.net
*eEye digital security (secure iss web server protection) => http://www.eeye.com

Just so tried of this article is the hand,my be useful for you even though i have not understand.