IDS vs IPS
IDS (Intrusion Detection System) yog cov tshuab uas kuaj xyuas cov haujlwm uas tsis tsim nyog, tsis raug lossis tsis raug cai hauv lub network thiab tshaj tawm lawv. Tsis tas li ntawd, IDS tuaj yeem siv los txheeb xyuas seb lub network lossis lub server puas muaj kev cuam tshuam tsis raug cai. IPS (Intrusion Prevention System) yog ib qho system uas nquag txiav kev sib txuas lossis xa cov pob ntawv, yog tias lawv muaj cov ntaub ntawv tsis raug cai. IPS tuaj yeem pom ua qhov txuas ntxiv ntawm IDS.
IDS
IDS saib xyuas lub network thiab kuaj xyuas cov haujlwm tsis tsim nyog, tsis raug lossis tsis raug cai. Muaj ob hom IDS tseem ceeb. Thawj qhov yog Network intrusion detection system (NIDS). Cov tshuab no tshuaj xyuas cov tsheb khiav hauv lub network thiab saib xyuas ntau lub tswv yim txhawm rau txheeb xyuas kev nkag mus. Sensors yog siv los ntes cov tsheb khiav hauv lub network thiab txhua pob ntawv raug tshuaj xyuas los txheeb xyuas cov ntsiab lus tsis zoo. Hom thib ob yog Host-based intrusion detection system (HIDS). HIDS raug xa mus rau hauv cov cav tov lossis lub server. Lawv txheeb xyuas cov ntaub ntawv hauv zos rau lub tshuab xws li cov ntaub ntawv kaw lus, kev tshawb xyuas txoj kev thiab cov ntaub ntawv hloov pauv kom paub tus cwj pwm txawv txawv. HIDS sib piv cov ntaub ntawv ib txwm ntawm tus tswv tsev nrog cov kev ua ub no los txheeb xyuas qhov tsis txaus ntseeg. Hauv ntau qhov chaw, IDS cov cuab yeej tau teeb tsa tau muab tso rau hauv nruab nrab ntawm lub router thiab lub firewall lossis sab nraum lub router. Qee zaum IDS cov cuab yeej tau teeb tsa tau muab tso rau sab nraum lub firewall thiab boarder router nrog lub siab xav pom qhov dav ntawm kev sim tawm tsam. Kev ua tau zoo yog qhov teeb meem tseem ceeb nrog IDS systems vim lawv tau siv nrog cov khoom siv bandwidth siab. Txawm hais tias muaj cov khoom siv ua haujlwm siab thiab cov software tshiab, IDS nyiam tso cov pob ntawv vim lawv tsis tuaj yeem tswj hwm qhov loj dhau.
IPS
IPS yog lub kaw lus uas nquag ua cov kauj ruam los tiv thaiv kev cuam tshuam lossis kev tawm tsam thaum nws txheeb xyuas ib qho. IPS muab faib ua plaub pawg. Thawj qhov yog Network-based Intrusion Prevention (NIPS), uas saib xyuas tag nrho lub network rau cov haujlwm tsis txaus ntseeg. Hom thib ob yog Network Behavior Analysis (NBA) cov tshuab uas tshuaj xyuas cov tsheb khiav mus los txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau cuam tshuam xws li kev tsis lees paub kev pabcuam (DDoS). Hom thib peb yog Wireless Intrusion Prevention Systems (WIPS), uas txheeb xyuas cov tes hauj lwm wireless rau cov tsheb khiav tsis zoo. Hom plaub yog Host-based Intrusion Prevention Systems (HIPS), qhov twg cov pob software raug teeb tsa los saib xyuas cov haujlwm ntawm ib tus tswv tsev. Raws li tau hais dhau los, IPS ua cov kauj ruam tseem ceeb xws li tso cov pob ntawv uas muaj cov ntaub ntawv tsis zoo, rov pib dua lossis thaiv cov tsheb khiav los ntawm qhov chaw nyob IP ua txhaum.
Qhov txawv ntawm IPS thiab IDS yog dab tsi?
IDS yog lub kaw lus uas saib xyuas lub network thiab kuaj pom cov haujlwm tsis tsim nyog, tsis raug lossis tsis raug cai, thaum lub IPS yog ib qho system uas kuaj pom kev nkag los lossis kev tawm tsam thiab ua cov kauj ruam tseem ceeb los tiv thaiv lawv. Qhov tseem ceeb ntawm ob qho tib si tsis zoo li IDS, IPS nquag ua cov kauj ruam los tiv thaiv lossis thaiv kev nkag mus uas tau kuaj pom. Cov kauj ruam tiv thaiv no suav nrog kev ua ub no xws li tso cov pob ntawv tsis zoo thiab rov pib dua lossis thaiv cov tsheb khiav los ntawm qhov tsis zoo IP chaw nyob. IPS tuaj yeem pom tau tias yog qhov txuas ntxiv ntawm IDS, uas muaj peev xwm ntxiv los tiv thaiv kev nkag mus thaum tshawb pom lawv.
