The Network Security. Org

Beyond Firewalls and IPS: Monitoring Network Behavior

How well do your network defenses block unknown types of attacks or catch stealthy attacks in progress? For combating previously discovered attacks and exploits at the network level, companies employ firewalls and intrusion prevention and detection systems (IPS/IDS). Such tools, however, won?t stop previously unseen types of attacks, (including new viruses, worms, and exploits of not-yet-disclosed vulnerabilities) or catch many attacks already in progress.

Hence companies need to add network defenses against unknown attacks. ?Companies can?t afford to learn about security breaches after they?ve already cascaded throughout the entire enterprise,? notes Ameet Patel, a JPMorgan executive who helps run LabMorgan, its strategic technology advisory group. That?s why ?CIOs and CSOs are demanding actionable intelligence to help their security teams determine if an attack is underway, and what resources are being affected in real time,? regardless of whether or not the exact type of attack has been seen before.

While it?s extremely difficult to pull information from a variety of network devices and build a picture of current network activity, new network behavior analysis (NBA) tools can help. These tools pull data from a variety of sources?including actual network packets, plus firewalls, IDS, and IDP logs?then apply signatures to look for known attacks, while using algorithms to detect unknown attacks, and related events. Enterprise Systems | Beyond Firewalls and IPS: Monitoring Network Behavior

More News

• Website infection rate triples
  



• How to Use Honeypots to Improve Your Network Security
  



• Microsoft Patch Tuesday Targets 26 Application Flaws
  



• SSL VPNs might not be as secure as you think
  



• 8 tips to filter spam effectively
  



• Onus on IP address owner to prove innocence
  



• How to install an SSH Server in Windows Server 2008.
  



• Several vulnerabilities closed in the Linux kernel
  



• 8 Best Practices for Encryption Key Management and Data Security
  



• Free Honeypot Client Could Sting Malware
  



• What Firewalls Do & Donot Do
  



• Symantec fingers D Link for bot attacks
  



• WhiteHat: 90% of Sites Still Vulnerable
  



• Red Hat releases free security code
  



• A new type of Bluetooth security
  



• Dude, where is my perimeter?
  



• Scaring users into IT security
  



• VMware fixes security bugs
  



• The top 10 security land mines
  



• Encrypt volumes through a cross platform GUI with TrueCrypt 5.0