Firewalls, intrusion detection systems and vulnerability assessment: a superior conjunction?

摘要

In an environment where the threats are constantly evolving there have been rapid developments in both the technology of security tools and the way that they are packaged commercially. Amongst these tools are firewalls, vulnerabili- ty assessment (VA) and intrusion detection systems (IDS). This article consid- ers how these three key technologies interact and attempts to answer the question: "is this simply a case of more technology and cost, or does a combi- nation of these systems provide real advantages?" in order to assist that assess- ment, a review of these three technologies is provided, with a comparative summary in Table l.