Intrusion detection is the ability to identify, track, and stop unauthorized or malicious attacks before they can penetrate and damage your network. Intrusion detection capability is only one part of a complete data security model and complements existing components, such as firewalls, encryption mechanisms, strong authentication systems, etc.

Almost all intrusion detection technologies fall into two basic types of intrusion detection - network-based and host-based.

• A network-based intrusion detection system (IDS) monitors traffic flowing through a network, looking for patterns that indicate unauthorized or malicious activity is taking place.
  
• Host-based and network-based intrusion detection systems can prove invaluable in fortifying your defensive posture.

Benefits:

An IDS/IPS system in an enterprise provides the following measurable benefits:

• protection against internal, external attacks,
• a higher security level,
• a shorter time of response to security breach attempts,
• risk manageability,
• minimized business risk,
• consistent security management,
• Resource orientation: the ability to focus on mission critical systems.

AE ComputArE can assist you to implement IDS, including: which systems to implement; IDS system design; IDS implementation and on-going tasks to monitor the IDS system and logs.