Course: Name
Intrusion Detection System
Yours Name
Professor’s Name [optional]
DOS:
University

The fear of malicious attack has made us aware to secure our computer systems. Earlier, the information and data were stored in a central computer system but now it has been moved to the cloud like environment. These internet based technologies has made flexible data access and motivated mobile workforce but it has also increased danger of being attacked. One loop hole can harm your organization or breach your private data. Firewalls are used to secure the networks but they are not sufficient when these systems are becoming so vast. These now can be protected using intrusion detection system (IDS) which are used on two level- host level (HIDS) and network level ids (NIDS).
HIDS aim to protect single computer systems which are capable of detecting any malicious activity to be attacked on that particular computer system. These are also called sensors and are required for every machine. They increases the security as it is impossible to attack on so many NIDS installed on each system. These sensors monitor the data being passed and the events going on the system in which it is installed. HIDS are heavily dependent on audit trails and are manufacturer dependent. HIDS are capable of detecting who is using the system and can trace any improper activity with specific id. They are enough capable of working in switched topology environment and can also work on encrypted environment.
NIDS works at network level, it means they are not securing single computer but the whole network. They monitor the data traveling on any of the network segment, hence they are more capable. Each of the NIDS comes with attack signatures which are the definition of attack. These sensors alert if there are some improper activity found.
Using NIDS is more appropriate as it will not degrade the performance of the entire system. Another advantage is that monitoring process will be transparent to all hosts. Installing HIDS needs expertise while installment of NIDS doesn’t.
References
Zhengbing, H., Zhitang, L., & Junqi, W. (2008, January). A novel Network Intrusion Detection System (NIDS) based on signatures search of data mining. In Knowledge Discovery and Data Mining, 2008. WKDD 2008. First International Workshop on (pp. 10-16). IEEE.
-------------------------------------------------