Insider security Internal compromise still accounts for a majority of business losses. As employees become more and more technically sophisticated, the risk of insider security breaches increases. Most organizations rely on router rule-sets and passwords to restrict access to sensitive network systems and information. However, managing security though router tables is neither efficient nor effective in terms of detection. In particular, passwords are ineffective when internal users can easily monitor network traffic or implement password grabbing Trojans on unprotected workstations.
Intrusion detection needs to be a part of internal network security.
New threats, evolving solutions It has to be considered that the Internet will never be a totally safe haven for business. The Internet is a busy street where passers-by with different motivations are able to scan and to attempt to damage as they will. In the face of the continued evolution of hacking techniques and tools, intrusion detection needs to be in place and effectively monitored. Many IDS systems are not providing the benefit that was intended because they are not being consistently monitored and response plans have not been developed. Organizations that have implemented IDS systems are frequently overwhelmed with the volume of data that is created and overtaxed with the number of false-positive alerts that are received.