Questions about this topic? Sign up to ask in the talk tab.
HIDS
From NetSec
A Host-based Intrusion Detection System (HIDS) focuses on performing several intrusion detection mechanisms in a single host or computer, ensuring the integrity of it by searching for malicious or anomalous activity. It's an agent that monitors and reports on the system status, its stored information, and application activity. Some common features of HIDS systems include log analysis, real-time alerting, event correlation, integrity checking, policy enforcement, and rootkit detection.
- OSSEC
- Tripwire
- Verisys
External Links
- http://www.sans.org/security-resources/idfaq/what_is_hips.php
- http://www.ossec.net/
- http://en.wikipedia.org/wiki/Host-based_intrusion_detection_system
| This article contains too little information, it should be expanded or updated. |
|---|
Things you can do to help:
|
HIDS is part of a series on countermeasures.
