Question

Compare 2 different Intrusion Detection Systems. List the benefits and drawbacks of each system and explain which system you would choose for your company.

Answer 1

• Network intrusion detection system (NIDS)

1. Works in real time
2. They look for incoming traffic, outgoing traffic and local traffic
3. They take protective measures by their own

• Drawbacks

-They need to be constantly updated

-They are complicated to get optimal settings

-If they don't have a suitable configuration, you can have many false positives.

• Host-based intrusion detection system (HIDS)

1. Can monitore all or parts of the dynamic behavior and the state of a computer system
2. Can detect which program accesses what resource

• Drawbacks

-The hacker needs to leave a trace

-It's like an antivirus

-They are a complement of a NIDS.

I would choose the NID System because it offers me a widder protection by it self.