Security Technologies1 2 Essay

For the purpose of this assignment snort will be used as intrusion detections systems which is an open source IDS, snort has the ability to monitor traffics in real time and packet locking its also inspecting each packets as they enters into the network, Snort can be used as packet sniffer to analyse the network traffic in order to detect any bizarre looking packets or payloads which might have malicious data in it. Snort can also detect payloads attacks against the network or host system including but not limited to stealth port scan, and buffer overflows.

Network Intrusion Detection: Software exists to watch traffic on your network to search for malicious intent. Is an Intrusion Detection System going to be implemented? An IDS is not a fire and forget type system. It requires constant monitoring. Smaller organizations will be overwhelmed by the amount of information it produces.

* The Intrusion Detection System (IDS) provides the network with a level of preventive security against any suspicious activity. The IDS achieves this objective through early warnings aimed at systems administrators. However, unlike IPS, it is not designed to block attacks.

The goal of intrusion detection is to monitor network assets, detect anomalous behavior, and identify misuse within a network (Ashoor, Gore, 2011). An intrusion detection system (IDS) is a device or software application that monitors network system activities for malicious activity or policy violations and produces reports to a management station (Kashyap, Agrawal, Pandey, Keshri, 2013), additionally there are three types of IDS:

A firewall is a system or group of systems that enforces an access control policy between two or more networks. The means by which this control is accomplished varies widely, but in principle, the firewall is a pair of mechanisms, one that blocks traffic and one that permits traffic. Some firewalls emphasize blocking traffic, while others emphasize permitting traffic. The most important thing to recognize about a firewall is that it implements an access control policy. If you don't know what kind of access you want to permit or deny, or you let someone else or some product configure a firewall based on judgment other than yours, that entity is making policy for your whole organization.

The firewall provides protections against network intrusions by hosting intrusion prevention system modules to detect and prevent traffic that would disrupt the normal operations of the company. These security features will be configured to offer the greatest protection while allowing Pathways Industries personnel and their partners efficient access to the

Intrusion detection is similar in concept to a burglar alarm on a car. There is the lock system to prevent access to a car, similar to a firewall, and there is the alarm system, the intrusion detection system. Intrusion Detection Systems (IDS) are there to compliment the network or computers firewall, if or when there is a breach, it is the IDS that is able to identify it and then alert the administrator. Firewalls are an effective way for filtering information coming in to your network from the internet and are a good source of protection, but there are ways to circumvent a firewall which could leave you defenseless. An IDS monitors the firewall for breaches and also monitors the traffic on the organizations network for any anomalies. This is important in the instance of an external user connecting to an organizations infrastructure by connecting through an installed modem on the network, this form of attack cannot be caught by a firewall but an IDS is able to recognize the abnormal activity and report the intrusion to an administrator.

In an e-commerce world, organizations are susceptible to hackers and intruders. Thus creating the information technology protection systems which is used to reduce the possibility of intrusions from occurring. Intrusions occur by uninvited outsiders (sometimes intruders can be internal users like employees) who try to access an organization’s information system using the internet with the intent to gain competitive advantage of some sort. Organizations depend on security technology to avoid loss from security breach, as well as to improve their efficiency and effectiveness. However, firewalls are also vulnerable to errors, and implementing a security technology comes with challenges and critical decisions that can possibly cause a financial burden on the organization if done without seriousness and commitment. “Information security is about managing risk, and managing risk is about discovering and measuring threats to information assets; and taking actions to respond to those threats” (Al-Awadi, & Renaud, 2007, p.3). This paper will discuss a few aspects that are involved with firewalls and intrusion detection systems.

If Host based IDS are implemented correctly then they can detect attack in real time as much as Network based IDS if not fully. Now a day, the host system are intelligent systems, they can process multiple activities at the same time in many intervals. If there is any new entry added to the operating system, the IDS can immediately raise a flag to the management console if it matches found. It does not have wait for process to be run at the stipulated time for detection, thereby reducing the detecting and response time of the attack.

(Muhanty & Rao, (2008)) Describe the act of computer intrusion as any unauthorized attempt to access or damage or malicious use of information resources (Muhanty & Rao, (2008)). According to (Muhanty & Rao, (2008)), Intrusion detection deals with fast detection of unwanted violations in system 's normal behavior due to illegal actions (attacks) carried out by malicious users (Muhanty & Rao, (2008)). Individuals and organizations who use computers and the internet will need to have protection to keep their personal computers,

Have you ever surfed the web and received a popup alerting you a threat is detected? If so, you are not alone. This is a very common issue web browsers and organizations face. In order to resolve or prevent such issues, it is key to learn about the security of your network. Network security is the protection of networks that help secure files and directories of a computer. It helps protect the user from hackers, virus attacks, misuse and prevents unauthorized access. The importance of learning and becoming aware of network security is important for protecting yourself and others around you. I will be discussing the common type of attacks, methods to protect your computer from harm and discuss what the future may hold for network security.

A firewall is a collection of components, interposed between two networks, that filters traffic between them according to some security policy (Cheswick & Bellovin, 1994). Due to the increase in network attacks and awareness of cyber security firewalls are used not only in companies but also in home networks. Firewalls are the frontline of defence to secure the networks from security risks and attacks from cyber criminals. Firewalls filters network traffic based on filtering rules defined by the firewall administrator or admin. Although firewalls protects from network attacks, virus etc, it depends on the firewall policies defined, if the policies are not defined properly it proposes a security risk and limits the effectiveness of firewall security. . There are mainly three types of firewalling techniques based on the OSI layer in which the firewall is acting on. They are (1) packet filters, which inspect each packet passing through them, (2) application Gateways which act on specific applications such as FTP, Telnet etc and (3) circuit level Gateways, which apply security mechanisms whenever TCP and UDP connections are established. Firewalls have

Overall There is a fine line between a firewall and an IDS. There is also a technology called IPS Intrusion Prevention System. An IPS is essentially a firewall which combines network-level and application-level filtering with a reactive IDS to proactively protect the network. It seems

As time has gone on, society has advanced and the age of the computer came about, bringing its own advantages and concerns. One such concern was the question of computer security and personal information staying safe. It seems there has always been some form of computer security, however this form is dynamic, always changing and advancing. This is due to the fact that the technology that is made to bypass security is changing and advancing just as rapidly. Such as the progression of DDOS (Distributed Denial of Service) attacks, in previous years the attacks had a maximum of about 10 Gbit/s, whereas now they can exceed 300 Gbit/s (Shorov & Kotenko, 2014). This constant advancement created a never ending battle between cyber security and the technology that is meant to break past the security in place. In the modern age computer networks are the focus of many attacks on organizations, institutions, and infrastructure (Shorov & Kotenko, 2014). As computer technologies began to grow, the security of these computer systems started to play a bigger and bigger role, and new factors came into play. One factor that completely changed security in concerns to computers was the internet. Computers went from being arranged in an ad-hoc manner to suddenly being all connected over the internet. This brought about major security concerns because individuals and organizations didn’t want their sensitive and personal data in the hands of others.

An intrusion detection system (IDS), as mentioned previously is a cyber-security solution designed to defend against network attacks. It however does not prevent attacks like an Intrusion Prevention System (IPS) [27]. It is considered