112k views
17 votes
How do network intrusion detection systems (NIDS) and host-based intrusion detection systems (HIDS) differ?an NIDS focuses more on analyzing incoming traffic, while an HIDS monitors valuable OS filesan NIDS recognizes troubling patterns, while an HIDS is not capable of doing thisan HIDS focuses more on analyzing incoming traffic, while an NIDS monitors valuable OS filesan HIDS recognizes troubling patterns, while a NIDS is not capable of doing this

1 Answer

6 votes

Answer:

a. NIDS focuses more on analyzing incoming traffic, while an HIDS monitors valuable OS files

Step-by-step explanation:

Intrusion detection system is used in analyzing, detecting, and raising alarm on suspicious network activities used by hackers to access unauthorized sites. Network intrusion detection system is meant to work in real-time, so as to analyze incoming traffic. Packets moving across the network are evaluated for threats.

Host intrusion detection system work within the operating system of the device to evaluate the history of system files that could contain threats, or unusual file permission changes, and then raise an alarm.

User Israel Fonseca
by
3.1k points