Chapter 7, Problem 1RQ

Explanation of Solution

IDPS (Intrusion Detection and Prevention System):

• When a system has the ability to identify and modify its configuration and also prevents the intrusion present in the environment, it is called as Intrusion Detection and Prevention System.
• It includes functions of both detecting the intrusion and also preventing the intrusions present in the system.

Common Security system of an IDPS:

• The common security system of an IDPS is that it is capable of working like a burglar alarm.
• It has the ability to detect the traffic present in the network which will violate the rules that are configured in the system.
• When an intrusion is detected in the rules that are defined an alarm gets activated.
• The alarm gets activated in audible form or visual form or silent form.
• The notifications are enabled to the system directly through an email or using pages.

Similarity between IDPS and common security system:

• IDPS contains specific set of instructions for detecting and preventing the attack that is happening outside.
• The system is configured as a burglar alarm which acts as an alert to notify the external security services in an organization when a “break –in” happens.
• IDPS are similar with common security system as the alarm is set to warn the admin about the intrusion that had happened and will notify the offenders using burglar alarms sticker which indicates the system is being protected is same as the alarm detection used in common security system.