What is an Intrusion Detection System?

• A system that detects and logs cracking attempts, scans, and other malicious activity

• Two basic types: NIDS and HIDS

• Why use an Intrusion Detection System?

• If you're on the Internet, you WILL be subject to hacking attacks

• 80-90% of attacks originate internally

• Can I afford NOT to deploy an IDS?