IDS and IPS
Intrusion detections system (IDS) is a software application used to monitor networks for policy violations. Malicious activities are reported to an administrator or collected using security information or event management system. Intrusion Prevention System (IPS) is a network security system designed to prevent malicious activity within a network. IDS and IPS detect and prevent intrusions from hackers. IDS monitor and scan the packets and check them against database while IPS prevents the delivery of the packets into the network (Miller, 2019). Examples of IDS in the market include Crowds Strike Falcon, Snort, and Security Onion.
IDS and IPS are used to identify and discover cyber-attacks and online threats. IDS analyze network traffic for patterns and recognize malicious attack pattern. IPS has the ability to intervene and prevent delivery of malicious packets. IDS monitor network traffic and send an alert to the user when it identifies malicious traffic and the user takes action to find the root cause. IDS come into two variations to detect the bad traffic: A Network intrusion detection system (NIDS) and a Host intrusion detection system (HIDS). A NIDS uses sensors to monitor the network traffic for threats while A HIDS monitors traffic on the device where it is installed (Keary, 2019).
The main difference between the IDS and IPS is that the intrusion detection system is used to monitor a network, which sends alerts when malicious events on network are detected while the IPS reacts to the attacks with the aim of preventing them from reaching the targeted networks. Both the IDS and the IPS has the ability to detect an attack but their main difference is how to response to the attacks (Petters, 2020). Examples of IPS tools in market include Zeek, Fail2Ban, OSSEC, and Splunk (Cooper, 2019).
References
Miller, J. (2020, May 8). What is the Difference Between IDS and IPS? Retrieved from https://www.bitlyft.com/what-is-the-difference-between-ids-and-ips/
Peters, J. (2020, March 30). IDS vs. IPS: What is the Difference? Retrieved from https://www.varonis.com/blog/ids-vs-ips/