Intrusion detection systems have characteristics and downfalls that security
professionals should be aware of:
• Cannot always process all packets in busy networks
• Cannot analyze encrypted data
• Not as effective in switched-based networks
• Many false alarms
• Not an answer to all prayers—still need firewalls, anti-virus software,
security policies, and other types of controls
It is important to realize the IDS is just one piece of a security program and
should be used as one of the layers that protects the company and its assets.
No comments:
Post a Comment