Intrusion Detection

• Intrusion:

  • Break-in: Unauthorized access to resources and data
  • Denial-of-service: Use of resources in undesirable ways

• Detection:

  • Signature: Bad guy's activity different from regular users'
  • Detection depends on monitoring system for suspicious activity