Cyber Surveillance And Intrusion Detection System Essay

tools will help to detect intrusions and other suspicious activities on the network. The third challenge is to improve the

For the purpose of this assignment snort will be used as intrusion detections systems which is an open source IDS, snort has the ability to monitor traffics in real time and packet locking its also inspecting each packets as they enters into the network, Snort can be used as packet sniffer to analyse the network traffic in order to detect any bizarre looking packets or payloads which might have malicious data in it. Snort can also detect payloads attacks against the network or host system including but not limited to stealth port scan, and buffer overflows.

Internet and Web-based applications have made it possible to access information from anywhere. This new capability not only brings convenience to the authorized users but also motivates attackers alike. Only prevention based security measures that rely on access control or even fine-grained access control schemes, firewall and encryption, often fail to protect sensitive information against novel attacks. In view of this, a lot of emphasis is being given on strengthening intrusion detection systems for protecting secure information from unintended users.

* The Intrusion Detection System (IDS) provides the network with a level of preventive security against any suspicious activity. The IDS achieves this objective through early warnings aimed at systems administrators. However, unlike IPS, it is not designed to block attacks.

With the development of computer technology especial Internet skills, computer has become an important part of human life. On the same time, there are more and more attacks appearing. Hackers attempt to explore the vulnerability of the host to gain unauthorized access privilege and make unauthorized use. However, no all attack can be considered as an incident. Attacks can be classified as incidents only if they meet the following characteristics (Torres, Alissa. Aug, 2014):

Cyber-attacks intruding network systems is a threat the economy, national and public safety. Computer system pirates are the possible persons who can form groups that can attack the nation and cause the negative impact to the country's attack. More research should be done in the networking area to monitor systems performance and detect any malice attacks as soon as possible with correct advanced measures taken to solve the problems.

Even the focus of securing networks has moved from just intrusion detection to intrusion detection and prevention (Golomb, 2003). Although most companies have significant investments in physical security (security guards and laptop locks) and data security (IDS/IPS and firewalls), one of the biggest and yet most misunderstood threats is from internal sources.

The goal of intrusion detection is to monitor network assets, detect anomalous behavior, and identify misuse within a network (Ashoor, Gore, 2011). An intrusion detection system (IDS) is a device or software application that monitors network system activities for malicious activity or policy violations and produces reports to a management station (Kashyap, Agrawal, Pandey, Keshri, 2013), additionally there are three types of IDS:

Technology can also be used to be a security guard on the company’s network. “In every network today, we have the ability to capture detailed performance and event log data on just about every network device, system, or application that, in turn, provides us vital information about what is happening on our network” (Hale, n.d.). Intrusion Detection Systems (IDS) and Log Monitoring are used to identify potential unauthorized use of the network, systems or devices.

Network security has changed significantly over the past years. There is more and more data to monitor and analyze in order to detect the activity of your data and systems. Securing a network has many variables. Password authentication, network access, patches, anti-virus protection, intrusion detection, firewall and network monitoring tools are just a few of the things you can do to protect yourself.

The correct configuration of security technologies is mandatory to balance the need for access and safety of information (Cavusoglu & Raghunathan, 2009). Many companies use the layered approach to ensure protection of their network information system (Cavusoglu & Raghunathan, 2009). By using this approach, many security technologies rely on each other to operate effectively (Cavusoglu & Raghunathan, 2009). Three technologies commonly used together are Intrusion Detection Systems, Intrusion Prevention Systems, and firewalls. When configured properly, these technologies complement each other (Cavusoglu & Raghunathan, 2009).

The intrusion prevention systems (IPS) are network security applications that examine the activities on a network or system for malicious activities. These systems identify malicious activity then they log the information that was retrieved from the malicious activity and then they try to block or stop the intrusion. “In reaction to a security threat, an IPS may drop packets, reset connections, generate alerts, or quarantine potentially threatening

In today’s world technology has evolved to the point where a large amount of information is stored in cyberspace. It is because of this type of storage people around the world have an easier time at accessing information than ever before. The time before the late 20th century gathering information was long and tedious to get a book that the library did not own would take at least a couple of weeks depending on the time period or it may not have been possible to obtain that book. But now people can access a vast amount of information in a matter of minutes. Example, in modern times if someone wanted to know about a different culture they could simple look up the information on a computer or any device that had access to

In an e-commerce world, organizations are susceptible to hackers and intruders. Thus creating the information technology protection systems which is used to reduce the possibility of intrusions from occurring. Intrusions occur by uninvited outsiders (sometimes intruders can be internal users like employees) who try to access an organization’s information system using the internet with the intent to gain competitive advantage of some sort. Organizations depend on security technology to avoid loss from security breach, as well as to improve their efficiency and effectiveness. However, firewalls are also vulnerable to errors, and implementing a security technology comes with challenges and critical decisions that can possibly cause a financial burden on the organization if done without seriousness and commitment. “Information security is about managing risk, and managing risk is about discovering and measuring threats to information assets; and taking actions to respond to those threats” (Al-Awadi, & Renaud, 2007, p.3). This paper will discuss a few aspects that are involved with firewalls and intrusion detection systems.

Outsider attackers often called hackers because they gain access to system without authorization or permission from the owners or legitimate user. With information technology, comes increase risk of fraud and information theft. Hackers can steel sensitive information from one organization and sell it to a