Skip to main content

IPS (INTRUSION PREVENTIO SYSTEM)



WHAT IS INTRUDER

1. HE IS JUST A PERSON WHO IS TRYING TO GAIN UNAUTHORISED ACCESS TO A SYSTEM ON NETWORK WITH CRIMINAL INTENTION. 

IT CAN COMPLETELY CONTROL AND TERMINATE AND CRUPTE THIS NETWORK.

TYPES OF INTRUDER

1. INSIDE INTRUDER 

2. OUTSIDE INTRUDER

OUTSIDE INTRUDER

HE IS ACTUALLY NOT HAVING AREA AUTHORISED ACCESS TO THE SYSTEM OR NETWORK.

 INSIDE INTRUDER

1. HE IS HAVING SOME AUTHORISED ACCESS TO THE SYSTEM OR NETWORK BUT IS SOME RESTRICTIONS. HE DO NOT USE IS FOR THE PURPOSE OF SYSTEM.

2. INSIDE INTUDOR IS HARMFUL THAN THE OUTSIDE INTRUDER BECAUSE VERY DIFFICULT TO IDENTIFY HIS.

WHAT IS IPS

1. IN SHORT, AN INTRUSION PREVENTION SYSTEM (IPS), ALSO KNOWN AS INTRUSION DETECTION PREVENTION SYSTEM (IDPS), 

2. IPS IS A NETWORK SECURITY TOOL WHICH CAN BE HARDWARE OR SOFTWARE THAT CONTINUOUSLY MONITORS ARE NETWORK FOR MALICIOUS ACTIVITY AND TAKES ACTION TO PREVENT IT.

IT INCLUDING REPORTING BLOCKING OR DROPPING IT.  WHEN IT DOES OCCUR.

___________

WHO IS WORK IPS

1. HOW AN IPS WORKS. AN INTRUSION PREVENTION SYSTEM WORKS BY ACTIVELY SCANNING FORWARDED NETWORK TRAFFIC FOR MALICIOUS ACTIVITIES AND KNOWN ATTACK PATTERNS. 

2. THE IPS ENGINE ANALYZES NETWORK TRAFFIC AND CONTINUOUSLY COMPARES THE BITSTREAM WITH ITS INTERNAL SIGNATURE DATABASE FOR KNOWN ATTACK PATTERNS.

___________

FIGURE OF IPS

TYPES OF IPS 

1.  (NIPS) NETWORK-BASED INTRUSION PREVENTION SYSTEM . A NIPS MONITORS AND PROTECTS AN ENTIRE NETWORK FROM ANOMALOUS OR SUSPICIOUS BEHAVIOR.

2.  (WIPS) WIRELESS INTRUSION PREVENTION SYSTEM.

 3.  (HIPS) HOST-BASED INTRUSION PREVENTION SYSTEM.

__________

IP IPS STANDS FOR INTRUSION PREVENTION SYSTEM (IPS). IT IS A NETWORK SECURITY DEVICE THAT MONITORS NETWORK TRAFFIC FOR MALICIOUS ACTIVITY AND TAKES ACTION TO BLOCK OR PREVENT IT.

IPS CAN BE USED TO PROTECT AGAINST A WIDE RANGE OF THREATS, INCLUDING:

VIRUSES

WORMS

TROJANS

SPYWARE

DENIAL-OF-SERVICE ATTACKS

PORT SCANS

ZERO-DAY ATTACKS

IPS WORKS BY INSPECTING NETWORK TRAFFIC FOR PATTERNS THAT MATCH KNOWN ATTACK SIGNATURES. IF A MATCH IS FOUND, THE IPS CAN TAKE ACTION TO BLOCK OR PREVENT THE ATTACK,

SUCH AS:

DROPPING THE PACKET

LOGGING THE PACKET

SENDING AN ALERT

TAKING CONTROL OF THE INFECTED SYSTEM.

IPS CAN BE DEPLOYED IN A VARIETY OF WAYS, INCLUDING:

AS A STANDALONE DEVICE

AS A MODULE IN A FIREWALL OR ROUTER

AS A VIRTUAL APPLIANCE

IPS IS AN IMPORTANT PART OF A COMPREHENSIVE NETWORK SECURITY STRATEGY. BY DETECTING AND PREVENTING MALICIOUS ACTIVITY, IPS CAN HELP TO PROTECT NETWORKS FROM A WIDE RANGE OF THREATS.

HERE ARE SOME OF THE BENEFITS OF USING AN IP IPS:

IT CAN HELP TO PREVENT CYBERATTACKS.

IT CAN HELP TO IDENTIFY AND RESPOND TO SECURITY THREATS.

IT CAN HELP TO IMPROVE NETWORK PERFORMANCE.

IT CAN HELP TO REDUCE THE RISK OF DATA BREACHES.

____________

DIFFREENCE BETWEEN IDS AND IPS




 




Comments

Post a Comment

Popular posts from this blog

About Me Information

HELLO FRIENDS, I HOPE YOU ALL ARE DOING WELL. I AM MAKING THIS BLOG FOR THE INFORMATION OF NETWORKING ABOUT. IN THIS BLOG WE WILL READ CCNA (200-301) AND ITS RELATED AND NETWORK RELATED INFORMATION. MY NAME IS ABDUL MANAN JAVED MANJ MY AGE IS 21 YEAR    I AM STUDED ABOUT NETWORK  TECHNOLOGY EMAIL ID : mananrajpoot449@gmail.com CONTACT NO : +923486777628 ADDRESS : ISLAMABAD,G7,KHADA MARKET My Website   My Facebook Account My Facebook Page My Linkedin Profile _____________________________ CONTENT ABOUT  HIS BLOGG 1.  Computer Network 2.   What Is Internet 3.   Network Architecture 4.  Osi Refrence Model 5.  Operating System 6.  Internet Protocol (Ip) 7.  Internet Protocol Types 8.   Port Number 9.  Mac-Address 10.    WHAT IS HUB 11.   WHAT IS SWITCH 12.   WHAT IS ROUTER 13.   WHAT IS NETWORK 14.   NETWORK CABLES 15.   ROUTING 16.  Data Transmission 17...
Post a Comment
Read more

CSST COURSE 1.0

Q1. WHAT IS A ADDRESSING. Network addressing is like a two-part delivery system:   Logical Addressing (IP): This is like your permanent address (e.g., 192.168.1.1) that lets data find your device anywhere on the internet. Physical Addressing (MAC): Think of this as a unique ID for your device's network card (AA:BB:CC:DD:EE:FF) used for local delivery within your network. Q2. WHAT IS A PACKET AND FRAME . Packets: Layer: Network Layer (Layer 3) Content: The actual data you want to send, like an email, a video, or website information. Addressing: Contains logical addresses (IP addresses) to identify the sender and receiver on the network. Size: Can vary depending on the data type, but generally larger than frames. Travels across networks: Packets can travel across different networks, like the internet, as they are routed based on IP addresses. Frames: Layer: Data Link Layer (Layer 2) Content: The packet wrapped with additional information for local deliver...
Post a Comment
Read more

DOS AND DDOS ATTACK

A Dos (Denial-Of-Service) Attack and A DDOS (Distributed Denial-Of-Service) Attack Are Both Attempts to Make a Computer System or Network Resource Unavailable to Legitimate Users. However, They Differ in How They Achieve This: Dos Attack: Imagine A Single Person Throwing Rocks at A Castle Gate. A This Person Represents the Attacker, And the Rocks Represent the Malicious Traffic. The Castle Gate Represents the Target System or Network Resource. The Attacker Keeps Throwing Rocks, Trying to Overwhelm the Gate's Defenses and Gain Entry. Dos Attacks Are Typically Launched from A Single System. They Can Be Effective Against Small Systems or Networks, But Larger Systems Can Often Withstand Them. DDos Attack: Imagine An Army Throwing Rocks at A Castle Gate. This Army Represents the Attacker, And the Rocks Represent the Malicious Traffic. The Castle Gate Represents the Target System or Network Resource. The Attackers Coordinate Their Attack, Throwing Rocks from Multiple Directions at Once. ...
Post a Comment
Read more