HP-UX Security Features - OpenMPE
HP-UX Security Features - OpenMPE
HP-UX Security Features - OpenMPE
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Network-based vs. Host-based<br />
Intrusion Detection<br />
NID<br />
HID<br />
Pros<br />
• Non-intrusive<br />
• OS independent<br />
• Detects common, known<br />
network attacks<br />
• Detects insider & outside<br />
attacks<br />
• Detects both known and<br />
unknown attacks<br />
• Anomaly detection<br />
• Not impacted by:<br />
• encrypted traffic<br />
• high speed networks<br />
Cons<br />
• Does not scale well<br />
• Ineffective against encrypted<br />
traffic<br />
• Does not detect unknown<br />
attacks (signature-based)<br />
• Does not detect insider<br />
attacks<br />
• Needs to be tailored<br />
• Can incur some overhead<br />
• Most are signature based<br />
Host <strong>Security</strong> – Products and <strong>Features</strong><br />
August 26, 2004 25
Change language