Intrusion Prevention Systems
Prevent Network Intrusion
The criminal act of breaking into computer networks, one definition of “hacking,” poses a major threat to everyone connected to the Internet. It threatens infiltration, loss of proprietary data, fraud, destruction and operational paralysis. The more prominent the organization is, the greater its risk is of being hacked – and the bigger the challenge (and thus payoff) is for an illegal hacker.
As hackers use their genius to develop sophisticated tools to realize their unlawful aims, businesses must take every precaution to prevent successful attacks. Firewalls have become ineffective as attacks move to the application level. Anti-virus programs are also not enough as they offer only reactive measures. Organizations must constantly map and monitor activities to prevent hackers from slipping anything past their networks’ defenses.
These include:
- Vulnerability-based threats such as:
- Worms and BotNets
- Trojan horses and the creation of backdoors
- Vendor-specific exploitation vulnerabilities in products e.g., Microsoft, Oracle
- Exploitation of vulnerabilities in applications such as web, mail, VoIP, DNS, SQL
- Spyware, Phishing, anonymizers
- Non-vulnerability-based threats that misuse application and server resources such as:
- Server brute force attacks; misuse of server authentication/authorization schemes
- Web application vulnerability scanning
- SIP application scanning
- SIP application flooding
Strengthen Your Defenses
Intrusion prevention systems (IPSs) are an integral part of a defense approach, since there aren’t other devices which exercise access control to protect computers from exploitation. IPSs were invented to resolve ambiguities in passive network monitoring by placing detection systems in-line (regarded by some to be an extension of intrusion detection system [IDS] technology, IPS technology is actually another form of access control, like an application-layer firewall). IPSs are a considerable improvement upon firewall technologies as they make access control decisions based on application content, rather than IP addresses or ports as is done by traditional firewalls.
The advanced intrusion detection and prevention capabilities offered by the DefensePro IPS provides maximum protection for network elements, hosts and applications. It is composed of different application-level protection features to prevent intrusion attempts such as worms, Trojan horses and single-bullet attacks, facilitating complete and high-speed cleansing of all malicious intrusions.
Features include
- Vulnerability-based signature protection powered by Radware’s Security Update Service
- Zero-day worm propagation prevention
- Anti-scanning protection
- Security reports
Methods of attack will continue to evolve, increasing in complexity and becoming at once more dangerous and difficult to detect. To effectively protect their network and its users, network intrusion prevention systems need to be one step ahead of any threat. Based on adaptive behavioral-based and signature based technologies, Radware’s IPS solutions provide organizations with integrated network intrusion prevention and Denial of Service (DoS) protection. These defend against both network- and application-level attacks, delivering a holistic approach to application- and network-level threats, while enhancing the overall performance of security across the organization.