Chapter 7, Problem 1E

Explanation of Solution

IDPS (Intrusion detection and Prevention system):

• When a system has the ability to identify and modify its configuration and also prevents the intrusion present in the environment, it is called as Intrusion Detection and Prevention System.
• It includes functions of both detecting the intrusion and also preventing the intrusions present in the system.

Event correlation:

• Event correlation is a process where a network event gets monitored to consolidate the alerts and error logs into a short and easily understandable package.
• Event correlation simplifies and speeds up the monitoring of networks.

Compression:

• It is a process of reducing the occurrence of same event that repeats multiple times.
• It helps the system analyst identify the multiple occurrence of a single event and remove the redundancy.
• It helps in removing the duplicates of the event that occur.
• It helps the system analyst identify event that is repeating and will able to prevent viewing each and every event individually by eliminating the redundancy.
• The occurrence of the event is identified using some kind of counter...