Intrusion Detection System
In reference to firewalls, proxies, Intrusion Prevention Systems and Intrusion Detection Systems. Why are they important for network security & how do they work together? What are the fundamental differences between MAC, DAC and RBAC. Find something that uses these different kinds of access controls and explain. What value does a managed security service provide for you? (Vulnerability management, situation awareness) Explain why good physical security is critical to good information security SANS puts something out called SANS top 20 critical security controls. Focus on one of the controls and talk about why it is a critical control and why it’s important to information security. Pick one control and elaborate on it. Chapter 7 provides information on Intellectual property rights, trade secrets, and trademarks. Why are trade secrets not covered by law? Intrusion detection systems detect known things. It detects but does not protect it. It uses statistical anomaly based on a rule or policy. Describe the effectiveness of an IDS sensor. What are some characteristics of a good firewall? (manageability, doesn’t sacrifice performance, ease of use, logging) What is the difference between malware and an advanced persistent threat?
