Intrusion Detection System

INTRUSION DETECTION SYSTEM

An intrusion detection system (IDS) is a system that monitors network traffic for suspicious activity and issues alert when such activity is discovered. Detection and reporting is the primary function, some intrusion detection systems are capable of taking actions when malicious activity or anomalous traffic is detected, in which includes blocking traffic sent from suspicious IP addresses. 

Although intrusion detection system monitor networks for potentially malicious activity, they are also prone to false alarms. Consequently organizations need to fine-tune their IDS system when they first install them or constantly update it. This would mean properly configuring their intrusion detection system to recognize what normal traffic on their network looks like compared to potentially malicious activity. 

BENEFITS 

Intrusion detection systems offer organizations a number of benefits, starting with the ability to identify security incidents. An IDS can be used to help analyze the quantity and types of attacks, and organizations can use this information to change, upgrade or enhance their security system or implement a more effective controls. An intrusion detection system can also help companies identify bugs or problems with their network device configurations. these metrics can then be used to assess future risk.