Reference no: EM132625845

Question:1

Unauthorized or unwanted interference is an intrusion. Those unwanted or unauthorized interference are normally carried out with bad intentions. Intrusion always has the intention of collecting some information about an organization like the internal structure of the network or the software systems ranging from tools, utilities, and operating systems to software applications that a certain organization use and finally initiate some connections in the internal network and carry out some attacks. An intrusion detection system (IDS) refers to software and hardware combination or is the combination of software and hardware and helps in detecting intrusions into the system or any given network (Abdelsalam, Salsano, Clad, Camarillo, & Filsfils, 2018, November). It complements firewalls and does provide a thorough inspection of packets headers and the content providing protection in the long run against attacks which otherwise firewall perceives as benign network traffic.

Intrusion prevention system, on the other hand, helps in preventing intrusions. IDS do the detection of packets while the IPS will do the prevention by dropping packets and denies them to enter or block the entire connection (Calado, 2018). IDS and IPS jointly monitor network traffic for any kind of malicious activity IPS in this scenario being considered as an extension of IPS. IPS can decide to drop packets or reset the connection and send some alarm to the management console.

Question:2

Intrusion Detection System (IDS) is termed as a combination of both the software and hardware. The main aim of the combination is to detect an intrusion into the system or any other network. The intrusion Detection system also compliments a firewall by thoroughly inspecting the packet header together with its contents therefore, securing against attacks which could be perceived by the firewall (Alicherry, et al, 2006).

In windows system, firewalls watch control rules, this means a packet could either allow or not. The rule determines whether the network, application or the host should be authorized into a trusted kind of network. In windows system, a firewall is important especially for user information since authorized personnel cannot access such information. Apart from IDS/IPS, SSL can be used to secure user information in windows' system (Alicherry, et al. 2006). Secure Socket layer is termed as a cryptographic protocol which is meant to provide security to information over the computer network. This kind of connection is private since the symmetric cryptography is utilized especially when encrypting the data to be transmitted. An SSL connection is very reliable because the message which is passed involves message integrity check whereby message authentication code is used so that it can prevent the undetected loss of data especially when transmitting.