Security+ Training Guide

Network-Based Intrusion Detection

Understand the basic security concepts of intrusion detection methodologies.

IDS stands for intrusion detection system. As clear as this definition is, the industry is segmented as far as the application of IDS methodologies is concerned. Various organizations claim to have the best intrusion detection system. Yet if examined, they all use different approaches or combinations thereof—and oftentimes the very definition of what constitutes an intrusion is not the same. In the following sections, we will review the various approaches to detecting intrusion in a corporate local area network (LAN).

The two main categories of IDSs are network-based intrusion detection systems and host-based intrusion detection systems ...