Talk:Intrusion detection system

From Wikipedia, the free encyclopedia
Jump to: navigation, search
          This article is of interest to the following WikiProjects:
WikiProject Computer science (Rated Start-class, Low-importance)
WikiProject icon This article is within the scope of WikiProject Computer science, a collaborative effort to improve the coverage of Computer science related articles on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.
Start-Class article Start  This article has been rated as Start-Class on the project's quality scale.
 Low  This article has been rated as Low-importance on the project's importance scale.
 
WikiProject Computer Security / Computing  (Rated Start-class, High-importance)
WikiProject icon This article is within the scope of WikiProject Computer Security, a collaborative effort to improve the coverage of computer security on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.
Start-Class article Start  This article has been rated as Start-Class on the project's quality scale.
 High  This article has been rated as High-importance on the project's importance scale.
Taskforce icon
This article is supported by WikiProject Computing.
 
WikiProject Computing (Rated Start-class, Mid-importance)
WikiProject icon This article is within the scope of WikiProject Computing, a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.
Start-Class article Start  This article has been rated as Start-Class on the project's quality scale.
 Mid  This article has been rated as Mid-importance on the project's importance scale.
 

IDS Terminology[edit]

IDS stans for intrustion detection system. This section needs to be cleaned up. It should not just be a list of terms. One suggestion would be to integrate this terminology into the other sections. --71.90.69.48 (talk) 05:14, 4 March 2009 (UTC)--71.90.69.48 (talk) 05:14, 4 March 2009 (UTC)

IDS Evasion[edit]

I've fleshed out the IDS evasion section - and since it was about the same size as the rest of the IDS section, I put it on its own page. The 'IDS Evasion with Unicode' link is also on the new page. --Sgorton 21:15, 5 February 2007 (UTC)

Merge with NIDS[edit]

While it's good that there’s a separate article on the network-side of IDS, I don't think its worthy of its own page (especially seeing how small the NIDS page is, 3 paragraphs). Since NIDS is the networking part of IDS, and we have this page on IDS, I believe we should incorporate the NIDS page into this one as its own section, and have a redirect from NIDS to here. Ghostalker 21:28, 7 April 2007 (UTC)

I tagged the articles appropriately. I'm neutral on the merge. -- intgr 21:40, 7 April 2007 (UTC)

I agree with the merge proposals. -- Rama

I also agree with the merge proposal --Sgorton 18:05, 1 May 2007 (UTC)

Not all intrusion detection systems are network-based. There are also host-based intrusion detection systems. For that reason, if they are merged, you need to be clear to which kind you're refering. KD 18:59, 12 May 2007 (UTC)

I would suggest only merging the NIDS if you're going to merge all major types (e.g. Network-based, Host-based, Application-based, Signature-based, Statistical Anomoly-based) of IDS into this article--otherwise, it makes more sense to have separate pages and links. (User mmh6577)

I concur with mmh6577. We'd be better off expanding the NIDS page, e.g. moving there all the network-related stuff, and linking properly here all the content for Host IDS, etc. Mauro Cicognini 15:06, 12 June 2007 (UTC)


I enjoyed a clear definition of nids on a separate page. If merge pages, please let nids as a clearly marked chapter.

NIDS and HIDS are two subsections of IDS and as such should be separate chapters.

1. IDS - 2 basic types:

  A.  NIDS (Network based)
  B.  HIDS (Host based)

I dont approve of merging the NIDS article to preserve the hierarchy & the structure of the main article the "IDS" if u want to merge the "NIDS" u'll have to add the other articles "PIDS" , "APIDS" to the main one. Marco C.

I think it will be better to leave them as it it is and let IDS point to NIDS as there is a relation.

Any way a clear definition of IDS which at present is given is a must —The preceding unsigned comment was added by 203.78.221.48 (talk) 19:22, August 23, 2007 (UTC)

Against Merging--an IDS is not just a NIDS, as was mentioned above Anapologetos (talk) 12:50, 4 March 2008 (UTC)

Against merging because both pages will probably be growing soon. --Clangin (talk) 15:49, 4 July 2008 (UTC)

I am also against merging. I think the current IDS page should define the fundamentals on how it works and keep the more in-depth explanation to the respective pages (NIDS/HIPS/etc). Breadtk (talk) 20:46, 10 August 2009 (UTC)

Wikipedia IDS page example[edit]

Hello, you can see what is done on the french version of this similar page: http://fr.wikipedia.org/wiki/Syst%C3%A8me_de_d%C3%A9tection_d%27intrusion —Preceding unsigned comment added by Toady (talkcontribs) 15:41, August 24, 2007 (UTC)

Analogy[edit]

I find the analogies of firewall = locks, ids = burglar alarm quite useful. Is it worth adding this in somewhere? —Preceding unsigned comment added by Segrub (talkcontribs) 09:44, 22 April 2008 (UTC)

intrusion detection or intrusion-detection?[edit]

Both are used in the article, please decide on one and then use it throughout the article. Also see Intrusion-prevention system. ItchyDE (talk) 14:15, 15 September 2008 (UTC)

IMHO, the correct term is without the "-"; at least that's the way I've seen it in most sources (eg: NIST 800-series guide). Regards, DPdH (talk) 16:19, 2 September 2009 (UTC)

Proposed merge with Network intrusion detection system[edit]

NIDS/NIPS is subset of IDS ♠♠ BanëJ ♠♠ (Talk) 06:25, 7 August 2014 (UTC)