Title: Chapter 7 Overview
Course: IN 2001 Principle of Information Assurance > Section: Module 7: Chapter Seven

Security Technology: Intrusions Detection and Prevention Systems and Other Security Tools
Introduction
An intrusion is a type of attack on information assets in which the instigator attempts to gain entry into a system or disrupt the normal operations of a system with, almost always, the intent to do malicious harm.
Incident response is the identification of, classification of, response to, and recovery from an incident, and it is frequently discussed in terms of prevention, detection, reaction and correction.
Intrusion prevention consists of activities that seek to deter an intrusion from occurring.
Intrusion detection consists of procedures and systems that are created and operated to detect system intrusions.
Intrusion reaction encompasses the actions an organization undertakes when an intrusion event is detected.
Intrusion correction activities finalize the restoration of operations to a normal state, and by seeking to identify the source and method of the intrusion in order to ensure that the same type of attack cannot occur again, they return to intrusion prevention—thus closing the incident response loop.
Intrusion Detection and Prevention Systems
Honey Pots, Honey Nets and Padded Cell Systems
Scanning and Analysis Tools
Biometric Access Controls