Tag Info

New answers tagged

1

You should look not into IDS technologies but Database Activity Monitoring (& Prevention). DAM(P) software shims itself in to watch all SQL queries and results and uses a combination of generic rules and guided knowledge to detect and in some cases prevent inappropriate use. An IDS will catch SQL injection, which is more specifically aimed at web ...


1

The IDS is an Intrusion Detection System. An IPS is an Intrusion Prevention System. The IDS only monitors traffic. The IDS contains a database of known attack signatures. And it compares the inbound traffic against to the database. If an attack is detected then the IDS reports the attack. But it is then up to the administrator to take action. The major flaw ...


1

The software must be installed on a host. Yes, you need to install it :) The software is designed to protect a single host. Yes, by definition, HIDS focuses on a single host/endpoint. The software checks network packets sent to the host against a set of signatures. I prefer to quote you this directly from an official and reliable source in ...


1

There's a difference between the capabilities of a "root" certificate, which can be used to sign other certificates and a "server" certificate which cannot. For an SSL proxy if you use a server certificate then the only host whose traffic could be seemlessly intercepted is the one whose Common Name is included on the server cert. The general idea with this ...



Top 50 recent answers are included