Cyber Security And Technology Detection System

CSEC 630 Lab2 -Intrusion Detection System and Protocol Analysis Lab (n.d.). University of Maryland University College. Retrieved from: https://learn.umuc.edu/d2l/common/viewFile.d2lfile/Database/NzkyMzkw/CSEC630_lab2_LEO.pdf?ou=33745

Intrusion detection and prevention systems monitor traffic/ logs either on the individual host or on the network in real time looking for signatures of common attacks or anomalies that will trigger an alarm either of an attack in motion or an attack that has already occurred.

The Intrusion Detection System (IDS) is a protection scheme which collect and analyze audit data for the entire network.

These proposals and systems suggestions can minimize the vulnerabilities associated with any compromises or intrusions within the network. Deploying an intrusion detection system is an essential security strategy for monitoring a network information system for abnormal or authorized activity. An intrusion detection system (IDS) is set of tools which monitor a network topology by providing a system administrator with the overall picture of how the system is being utilized. Executing an IDS will make a difference in creating a defense in depth architecture to be more compelling in recognizing any form of malicious activities. The capacity of the IDS is to monitor and survey the network traffic without affecting network activity. IDS tools gather information and analyzes it against a pre-characterized manage set, and against a set of known assault 'marks'. The IDS can scan port numbers and to determine if any breaches or attacks are occurring (Kuipers,

Firewalls prevent unauthorized users from accessing a private network when it is linked to the Internet. Intrusion detection systems monitor private networks from suspicious network traffic and attempts to access corporate systems. Passwords, tokens, smart cards, and biometric authentication are used to authenticate system users. Antivirus software checks computer systems for infections by viruses and worms and often eliminates the malicious software, while antispyware software combats intrusive and harmful spyware programs (Laudon and Laudon, 2009, p.260)

IDPS technology uses a lot of different methods to detect attacks. Signature-based, anomaly-based, and stateful protocol analysis. Most IDPS technology use multiple methods either separately or together to broaden and have better accuracy detection. The simplest detection method is signature-based because it corresponds to a known attack or type of attack. Signature based detection is the process of comparing observed events with known signatures of attacks to help identify possible attacks. Detection technologies only implementing signature-based attacks will be ineffective at detecting day-zero attacks.

The steps that can be implemented to ensure the prevention of computer system failure is to regularly update the computer operating system. Hackers often look for a system that does not have the latest protection. Software must also be put into place to prevent spam and detects spyware, programs installed hidden from the outside exposure of sensitive information computer system against intruders. When using the encryption software to protect customers' financial information from theft during a transaction.

Abstract: In this real world, protecting the information of an organization that is present in a software and hardware or data present on them is important. Here comes the point of Threat Intelligence, where it recognises the disruption or misleading of the service provide by these data present on the software and hardware in the form of accessing through network, code injection, data injection, hacking of the sites, controlling through physical access or by any means of taking control over the data. Simply, Threat intelligence is the set of data collected, assessed and applied regarding security threats, threat actors, exploits, vulnerabilities and compromise indicators. It is usually presented in either the form of strategic or tactical intelligence. Strategic intelligence involves broader and higher-level abstracts of data to identify threats and how the organization needs to react where Tactical intelligence involves collecting the network information, analyzing it, identifying the threats and responding. By using of this it makes cost effective to organization by reducing security incidents, which increases responsive time by finding solution in a least possible time. It also shows the security incidents, attacks and events. It provides decision support to the organization and possibly a strategic advantage. Threat intelligence also involves series of steps which make the data to be gone through several phases starting with collection, then planning, process, produce

The goal of intrusion detection is to monitor network assets, detect anomalous behavior, and identify misuse within a network (Ashoor, Gore, 2011). An intrusion detection system (IDS) is a device or software application that monitors network system activities for malicious activity or policy violations and produces reports to a management station (Kashyap, Agrawal, Pandey, Keshri, 2013), additionally there are three types of IDS:

Cybersecurity is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access (Rouse, 2010). Governments, military, corporations, hospitals, financial institutions, have their personal/ confidential information collected, processed, stored and data transmitted across networks to unauthorized computers. Due to the growing and sophistication of cyberattacks, real time shields are required to protect personal information.

Intrusion Detection Systems – IDS should be installed that contain the capabilities to monitor the network and send alerts if odd or different behavior is observed.

Technology can also be used to be a security guard on the company’s network. “In every network today, we have the ability to capture detailed performance and event log data on just about every network device, system, or application that, in turn, provides us vital information about what is happening on our network” (Hale, n.d.). Intrusion Detection Systems (IDS) and Log Monitoring are used to identify potential unauthorized use of the network, systems or devices.

In recent times to keep up the network security is a foremost and the network is hacked by the unofficial persons. There are various strategies to extend the safety similar to encryption and firewall. However these strategies are failed to detect the intrusions. For that a new technology is Intrusion detection system. The Intrusion detection is the problem of identifying unauthorized use, misuse and abuse of computer systems. Outside attackers are not only the problem, the threat of authorized users misusing and abusing their privileges is an equally pressing concern. The intrusion detection system used data mining strategies for the network safety, as a result of to guard the network from numerous assaults and malicious site visitors

Threats to critical information and systems have been evolving as the need to store information in the database increases. As technology increases in a rapid pace, so does the number of computer users. With this increase of users, the number of targets that presents itself for exploitation surges. Although, the types of targets and attacks change, classifications of attacks remain the same; exploiting user errors, hardware resources malfunction, and software weaknesses/glitches. Government and corporate agency have developed analysis of a variety of cyber-attacks and how it affects certain environments or individuals in a real world situation. The main goal is for these agencies to focus on how network simulation model have been developed for generating representative cyber-attacks and intrusion detection system. While variety of models is primarily designed to be used in testing cyber situational awareness and analysis tools, other applications can be utilized such as training analysts or public presentation could be an effective use of the model. Cyber security threats in the 21st century are in its early stages, mainly because government or corporate officials do not have the proper understanding of what is needed to develop a cyber security program or where to initiate the program for their agency or company. Public views of misconception will give new understanding on how severe cyber threats can develop within society and how individuals need to be familiarized in

Firewalls is categorized as a preventive control which is used as a defense shield around IT systems to keep intruders and hacking from occurring, whereas, an Intrusion Detection System (IDS) which is categorized as a detective control is used to detect intrusions that have already occurred (Cavusoglu, Mishra, & Raghunathan, 2005). However, IDSs are not