Please enable JavaScript.
Coggle requires JavaScript to display documents.
IPS and IDS - Coggle Diagram
IPS and IDS
Characteristics
both use signatures to detect patterns
both can detect atomic patterns
An IDS is designed to only provide an alert about a potential incident
IPS takes action itself to block the attempted intrusion or otherwise remediate the incident.
Advantages
IPS
Stops trigger packets
Can use stream normalization techniques
IDS
No impact on network
No network impact if there is a sensor failure
No network impact if there is a sensor overload
Disadvantages
IPS
Sensor issues might affect network traffic
Sensor overloading impacts the network
Some impact on network
IDS
Response action cannot stop trigger
Correct tuning required for response actions
More vulnerable to network security evasion techniques