Chapter 9 Network Security, Essay Example

Honey pot networks are the most advanced form of security, as they are also considered as advanced intrusion detection systems. Likewise, honeypot networks provide hackers to access the demilitarized zone and show itself as the actual network. The honeypot systems are expensive and are part of the security infrastructure of an organization. Moreover, honeypot networks can be utilized for improving an organization’s information security policy. The information mechanism of honeypot networks works by generating alerts prior to an attack or a security breach. For instance, simultaneous numbers of hypertext transfer protocol (HTTP) are discovered by honeypot network. These discovered patterns may lead to a suspicious activity that may about to happen within the network. In general, Intrusion detection systems cannot scan large amount of data that is transmitted to many remote locations. Besides, honeypot systems provide early detection of these threats and all anomalies within the network. Bastion host are used for analyzing large amount of data and report it to the responsible personnel. Likewise, there is a possibility of connecting more than one bastion hosts along with additional network switches, routers or even workstations. The idea is to portray a fake network to the outside world. As soon as an attack is identified within the DMZ zone, bastion host analyze the attack and reports to the responsible personnel.

Signature based IDS and Anomaly based IDS

Signature based IDS are normally used by organization for detecting patterns of unknown activity within the network. Likewise, the signature based IDS matches the unknown activity with the patterns defined in the signatures. Whereas, anomaly based IDS do not have predefined signatures. Likewise, any unknown activity or anomaly found within the network is reported.