COMPUTER NETWORKS AND COMMUNICATIONS
NETWORK SECURITY AND CYBERSECURITY
|
Question
[CLICK ON ANY CHOICE TO KNOW THE RIGHT ANSWER]
|
|
|
Intrusion prevention system
|
|
|
Fuzzing
|
|
|
Signature based
|
|
|
Network intrusion detection system (NIDS)
|
Detailed explanation-1: -What is an intrusion prevention system? An intrusion prevention system (IPS) is a network security tool (which can be a hardware device or software) that continuously monitors a network for malicious activity and takes action to prevent it, including reporting, blocking, or dropping it, when it does occur.
Detailed explanation-2: -The majority of intrusion prevention systems use one of three detection methods: signature-based, statistical anomaly-based, and stateful protocol analysis. Signature-based detection: Signature-based IDS monitors packets in the network and compares with predetermined attack patterns, known as “signatures”.
Detailed explanation-3: -Signature-Based Intrusion Detection. Signature-Based Intrusion Detection Systems (SIDS) aim to identify patterns and match them with known signs of intrusions. Anomaly-Based Intrusion Detection. Hybrid Intrusion Detection.
Detailed explanation-4: -System file comparisons against malware signatures. Scanning processes that detect signs of harmful patterns. Monitoring user behavior to detect malicious intent. Monitoring system settings and configurations.