Keep it simple, and an intrusion detection system will help keep your network safe

摘要

Intrusion detection systems have, according to industry analysts, been in terminal decline for some years now, but they are still refusing to lie down and die. Four reasons are given for their predicted imminent demise: 1. They produce too many false positives and negatives; 2. They increase the burden on IT organisations by requiring 24x7 monitoring; 3. They require a taxing incident response process; 4. They cannot handle high-bandwidth traffic.