Protocol-based intrusion detection system: Difference between revisions

Revision as of 20:09, 7 May 2007

Revision as of 01:32, 10 May 2007

Line 1:

{{Wikify|date=December 2006}}

A '''protocol-based intrusion detection system (PIDS)''' is an [[intrusion detection system]] thatwhich focusesis itstypically installed on a (computer) web server, and of use in monitoring and analysis onof the protocol or protocols in use by the computing system.

== Overview ==

A PIDS will monitor the dynamic behavior and state of the protocol and will typically consist of a system or agent

that would typically sit at the front end of a server, monitoring and analysing the communication protocol between a connected device (a user/PC or system) and the system it is protecting.