Chapter 7

Preventing System Intrusions

Michael A. West     Truestone Maritime Operations, Martinez, CA, United States

Abstract

Intrusion prevention is the process of performing intrusion detection and attempting to stop detected possible incidents. Intrusion prevention systems (IPSs) focus primarily on identifying possible incidents, logging information about them, attempting to stop them, and reporting them to security administrators. In addition, organizations use IPSs for other purposes, such as identifying problems with security policies, documenting existing threats, and deterring individuals from violating security policies. IPSs have become a necessary addition to the security infrastructure of nearly every organization. IPSs typically record ...

Get Computer and Information Security Handbook, 3rd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.