Zero Trust Security: An Enterprise Guide

© Jason Garbis and Jerry W. Chapman 2021

J. Garbis, J. W. ChapmanZero Trust Securityhttps://doi.org/10.1007/978-1-4842-6702-8_8

8. Intrusion Detection and Prevention Systems

Jason Garbis¹   and Jerry W. Chapman²

(1)

Boston, MA, USA

(2)

Atlanta, GA, USA

 

Enterprise security platforms clearly need the ability to prevent and detect intrusions—which we’ll succinctly define here as unwanted software execution or unwanted human activity on an enterprise device or network. Intrusion Detection Systems (IDS) provide the ability to detect, log, and alert on suspicious activity, and Intrusion Prevention Systems (IPS) add the ability to respond, by blocking or terminating the activity in some way. Intrusion Detection and Prevention Systems (IDPS¹) typically rely ...