-- PAGE 5 --

<< previous page next page >>

Intrusion Prevention Systems – A Review cont...

Network Based IPS (NIPS)

The Network Based IPS (NIPS), also sometimes known as “In-line proactive protection”, intercepts all network traffic and inspects for suspicious behaviour and code, either blocking malicious traffic or passing legitimate traffic forward.

Figure 3: IPS Inline model

Because of the in-line model (See figure 3 above), high performance is a crucial element of IPS devices in order to prevent bottlenecks on the network. Hence, the NIPS is usually designed using the following three components in order to accelerate bandwidth performance.

1. Network Chips (Network processor)
2. FPGA Chips
3. ASIC Chips

The Network Based IPS (NIPS) is usually purpose-built, just like switches and routers. Some mature technologies have been applied to NIPS, such as signature matching, the analysis of protocols and protocol anomalies, identification of aberrations in traffic patterns and so forth. NIPS solutions are widely deployed nowadays for protecting clients, servers, and network infrastructure from attacks of all kinds including DOS attacks, malware, worms, Trojans, and application specific threats. Overall, network based IPS design and implementation is the initial stage for a comprehensive network security solution.

-- PAGE 5 --

<< previous page next page >>

Page 1 | Page 2 | Page 3 | Page 4 | Page 5 | Page 6 | Page 7 | Page 8 | Page 9 | Page 10 | Page 11 | Page 12 | Glossary | References

Xuhua Ji, September 2007

(You are free to reproduce any of the information in this article or part thereof, so long as the byline remains intact and a link is provided back to this page)

    add to del.icio.us

We offer Windows Server 2003 and Windows Server 2008 training courses: read more

Further reading on network security