Chapter 8. Network Intrusion Detection

A good network intrusion detection system (IDS) can have an enormous positive impact on the overall security of your organization. The focus of intrusion detection is identifying attacks and security incidents, but in this chapter we see that intrusion detection can do so much more than that. After covering the basics of intrusion detection, we discuss the critical role that IDS plays in a perimeter defense. Much of this chapter is devoted to determining where IDS sensors should be deployed in various environments. By the end of this chapter, you will have a strong sense of how you can use network intrusion detection to strengthen your organization's defenses.