ESSAY : Information Security & Countermeasures

FIRST PAGE:
-Discuss the relative merits of traditional signature-based IDS/IPS technology with newer form, such as application awareness and anomaly detection.
-Discuss why it is so important for all application builders to always check data received from unknown sources, such as Web applications, before using that data. Provide example. These questions are designed to allow you to apply what you have learned in the chapters to real-world scenarios or hypothetical, but realistic, situations.

SAMPLE SOLUTION

Advantages of Signature-Based IDS/IPS Technology Over Application Awareness and Anomaly Detection
In the process of buying an intrusion detection mechanism, a lot has to be considered. One has the option of signature or an anomaly detection engine. Either detection method has advantages over the other. Some users incorporate both for their products. Signature based IDS/IPS technology entails searching for the network traffic for packet sequences that are said to be malicious (Baykara, & Daş, 2015). It is advantageous over anomaly detection since it is easy to develop as well as understand if one already knows the network behavior he/she is trying to detect. Furthermore, it is very quick to undertake pattern matching when using traditional signature based IDS/IPS technology as compared to when using anomaly detection. It therefore takes less power to the checks for a given confined rule…