hey guys here comes my new implementation of my learning i.e the IDS a concept of network security go through it and add your valuable comments

1. Intrusion Detection System By : Gaurav Koriya

2. Content Introduction What is Intrusion What is IDS (i) Functions (ii)Principles (iii) Components (iv)Types 4. Conclusion

6. Misfeasor: A legitimate user who accesses data, programs or resources for which such access is not authorized, or who is authorized for such access but misuses his or her privileges.

8. Intrusion Detection System (IDS) Analysis Engine Response Module Knowledge Base Alert Database Event Provider Other machines

10. IDS is a system designed to test/analyze network system traffic/events against a given set of parameters and alert/capture data when these thresholds are met.

11. IDS uses collected information and predefined knowledge-based system to reason about the possibility of an intrusion.

13. An IDS does not usually take preventive measures when an attack is detected.

14. It is a reactive rather than a pro-active agent.

16. The IDS must stay active and secure

17. The IDS must be able to recognize unusual activity

18. The IDS must operate without unduly affecting the system’s activity

21. Console: Responsible for analyzing packets captured by Sensor class.

31. Known attacks or

32. Suspicious behavior

33. Designed to detect attacks such as

34. Buffer overflow

35. Escalation of privilege

38. FTP and DNS servers;

39. E-commerce database servers, etc.

42. Known attacks

43. Suspicious network activity

44. Designed to detect attacks such as

45. Denial of service

46. Network probes

47. Malformed packets, etc.

48. Can be some overlap with firewall

50. Outside firewall

51. Just inside firewall

52. Combination of both will detect attacks getting through firewall and may help to refine firewall rule set.

53. Behind remote access server

54. Between Business Units