Chapter 7, Problem 4RQ

Program Plan Intro

Signature based IDPS (Intrusion Detection and Prevention):

• The signature based IDPS contains series of predefined, preconfigured and predetermined patterns of attack in their database.
• It will observe the data traffic of the network to match the patterns of the signature that are predefined.
• It is also called as Knowledge based IDPS.

Behavior based IDPS (Intrusion Detection and Prevention):

• The behavior based IDPS will obtain a baseline from the data obtained traffic that is obtained from a normal traffic.
• If an activity is suspected outside the baseline parameters, notification is send to the administrator by activating an alarm.
• It is also called as anomaly based IDPS.