Understanding Strengths and Weaknesses of Host-Based Intrusion Prevention Styles

ANALYSIS In previous research we introduced a framework for understanding the different protection styles and technologies in the market for host-based intrusion prevention systems (HIPSs). Since then, we have been asked, “What’s the best HIPS protection style?” The answer is that there is no “silver bullet.” No single protection style alone provides sufficient protection, and different organizations have different needs. Each style has its strengths and weaknesses. By combining styles, you balance these for a more effective intrusion prevention system – the “S” in HIPS. Through 2010, the best HIPS strategy for desktops and servers will use a combination of HIPS protection styles. Furthermore, your HIPS protection strategy for protecting servers will likely be different than for desktops, which will be different than for embedded devices, which will be different than for other organizations with different protection needs.