Investigation of Solutions for Intrusion Prevention and Detection

Abstract: Intrusion prevention and detection system is an effective network security solution from past few years. With this huge interconnected network called internet, nobody can deny the importance of IPS and IDS in a network. Both technologies provide a method of securing computer network from intrusion attacks. The main difference between IPS and IDS is the IPS is an active device which automatically takes prevention action against attacks.This paper aims to study this technology and provides full details about history, functionality and needs of both IDS and IPS and their Pros and cons. Furthermore all types of IDPS are also described in different scenarios depending upon their functionality. A major portion of this thesis also describes the comparison between different platform and operating systems using IDS and IPS. All the implementations are being done practically to get the results comparing Linux, windows, network and host based intrusion detection and prevention system.