This bulletin summarizes the recommendations developed by NIST for organizations in the effective use of intrusion detection and prevention systems (IDPS). These software systems help organizations to monitor and analyze events occurring in their information systems and networks, and to iddentify... See full abstract

This bulletin summarizes the recommendations developed by NIST for organizations in the effective use of intrusion detection and prevention systems (IDPS). These software systems help organizations to monitor and analyze events occurring in their information systems and networks, and to iddentify and stop potentially harmful incidents. The bulletin discusses the functions of intrusion detection and prevention systems, and describes four types of systems. It summarizes the components and architecture, security capabilities and management issues related to each type of system. NIST recommendations to organizations in implementing intrusion detection and prevention systems are included.
Hide full abstract