Intrusion Detection

An intrusion detection system will inspect the transactions for malicious activities and get notified when such kinds of activities are detected. Security information and event management system collects multiple requests from various sources and uses an alarm filtering system to notify about malicious activities. It used signature-based prevention techniques to detect the threats repeatedly entered into the system. Anomaly-based prevention techniques will be used to detect the newly generated malicious events. By using these two techniques threats will be identified and the alarm system will alert the system. There are some types of intrusion detection systems which are as follows.

Network Intrusion Detection System:
Here the network intrusion detection system will check the network where operations are being performed detect the unnecessary events that are trying to infect the network and generate a proper alert for it so that administrators get notified.

Host Intrusion Detection System:
Here the host intrusion detection system will inspect the malicious activities on the single host system. It will inspect the request and response generated on the host system scan the system to check the security and send an alert if found any threat.

Protocol-based Intrusion Detection System:
Here the protocol-based intrusion detection system will check the availability of protocol for the generated request and response for secure transactions. If some request is generated by some protocol then the same protocol will be used for the response

Application Protocol-based Intrusion Detection System:
The application protocol-based intrusion detection system will identify the malicious activities that have been communicated through application-based protocols and take proper action over them. 

Hybrid Intrusion Detection System:
The hybrid intrusion detection system is a combination of some intrusion systems. Here host data is connected with the network system and the hybrid intrusion will allow an overall scan of the system and generate a proper alert if any that will be discovered.