Obtaining Digital Evidence from Intrusion Detection Systems

Intrusion detection systems as evidence

Although the main aim of IDSs is to detect intrusions to prompt evasive measures, a further aim can be to supply evidence in criminal and civil legal proceedings. However the features that make a ID product good at providing early warning may render it less useful as an evidenceacquisition tool. An explanation is provided of admissibility and weight, the two determinants in the legal acceptabil...

Intrusion Detection Systems and Intrusion Prevention Systems

Evolving Intrusion Detection Systems

An Intrusion Detection System (IDS) is a program that analyzes what happens or has happened during an execution and tries to find indications that the computer has been misused. An IDS does not eliminate the use of preventive mechanism but it works as the last defensive mechanism in securing the system. This Chapter evaluates the performances of two Genetic Programming techniques for IDS namely...

Intrusion Detection Systems

Modern Intrusion Detection Systems

Intrusion detection systems (IDS) help detect unauthorized activities or intrusions that may compromise the confidentiality, integrity or availability of a resource. This paper presents a general overview of IDSs, the way they are classified and the different algorithms used to detect anomalous activities. It also describes the various approaches and the importance of IDSs in information security.