Security > Intrusion Detection & PreventionEssentials

Network-based intrusion-prevention systems are in-line devices intended to detect and block a wide variety of attacks, but the equipment still is often used more like an intrusion-detection system to passively monitor traffic, new research shows.

There has been a long history of attacks on the Domain Name System ranging from brute-force denial-of-service attacks to targeted attacks requiring specialized software. In July 2008 a new DNS cache-poisoning attack was unveiled that is considered especially dangerous because it does not require substantial bandwidth or processor resources nor does it require sophisticated techniques.

Tips to thwart DNS cache-poisoning attacks

Enterasys Networks this week is expected to unveil a distributed intrusion prevention system (IPS) designed to detect and respond to threats across multivendor wired and wireless networks.

Check Point Software is introducing a set of security appliances for midsize businesses and branch offices of larger businesses bent on reducing the clutter of devices and the cost and hassle of dealing with multiple vendors.