SNORT Network-Based IDS - technical definition

Popular, free of charge, pattern-based Intrusion Detection System specializing in the analysis of network traffic. With the incredible growth of the Internet has come a new aspect of network security, SNORT network-based IDS, or intrusion detection systems. As the Internet continues to grow, so does the potential for damage caused by crackers—which is why intrusion detection systems are so essential. In the recent past, solutions for overcoming intrusions have included firewall components such as packet filters and proxy firewalls, but today such solutions are not enough. Firewalls, for example, cannot detect back doors around the firewall. The security conditions are even worse if proxy firewalls are not being used at all. Moreover, current research suggests that more than half of all recorded breaches in industry, government, and educational computer systems have been caused by an insider legitimately behind the firewall. For all these reasons, companies have recently started deploying intrusion detection systems (IDS) such as SNORT as an additional part of a network’s security architecture.

See Also: Firewall; Internet; Intrusion Detection Systems (IDS); Packet.