Intrusion Detection Systems
Channel: Miles Johnson
Date: 2020-11-19

IDS makes mistakes. IDS works best when it is another lifeline in a controlled and limited environment. IDS is almost worthless in uncontrolled, unlimited environments. Most of the expense of IDS is the cost of properly handling IDS events.


Required links for Network Traffic Analysis students:
- https://ietf.org/rfc/rfc3514.txt (An Internet Standard for flagging hostile network traffic.)
- https://en.wikipedia.org/wiki/Intrusion_detection_system (Wikipedia article on IDS software.)
- https://en.wikipedia.org/wiki/Snort_%28software%29 (Wikipedia article on Snort IDS software.)