Intrusion Detection

The six components of an intrusion detection system are ___________. Answer: Detection (initiating), Annunciation (notification), Control panel, Control units, Communication devices, and Power supplies (primary and backup). Alarm wires and power, lighting, or Class 1 circuits must be separated by at least _____. Answer: 2 inches The danger of a short transmission link on an outdoor microwave installation is the signal will be too __________. Answer: Strong preventin...

What is an Intrusion Detection System Answer: - Terminology - Honeypots - Scanners - Sniffers Intrusion Answer: occurs when an attacker attempts to gain entry into or disrupt the normal operations of an information system, almost always with the intent to do harm Intrusion prevention Answer: consists of activities that seek to deter an intrusion from occurring Intrusion detection activities Answer: consists of procedures and systems created and operate...

Intrusion Answer: Any unauthorized access, not permitted attempt to access/damage or malicious use of information resources Intrusion Detection Answer: Detection of break-ins and break-in attempts via automated software systems intrusion detection systems ( IDS ) Answer: defense systems, which detect and posssibly prevent intrusion detection activities monitors for malware , network attacks, and host based attacks What is not an IDS? Answer: Network lo...

Classes of Intruders: Answer: Cyber criminals, activists, state-sponsored organization's, others Cyber Criminals Answer: Either individuals or members of an organized crime group with a goal of financial award. To achieve this, their activities may include identity theft, theft of financial credentials, corporate espionage, data theft, or data ransoming. Meet in underground forums to coordinate attacks. Activists Answer: Either individuals, usually working as insid...

Intrusion Detection Systems (IDS) Answer: they are responsible for monitoring activity on a system or network and then logging or notifying the admin of any suspicious activity Analysis Methods Answer: - Signature-Based Systems - Anomaly-Based Systems - Heuristic Signature-Based Systems Answer: - determines suspicious activity based on the signatures in a file that you would need to program or keep up to date - when the IDS captures behaviors it compares the acti...