Intrusion Detection

• Second line of defense (firewall is 1st)

• Quick detection - minimize damage and quicker recovery

• Deterrent - an effective intrusion detection system helps to prevent intrusions

• Collection of techniques - information about intrusion techniques leads to stronger prevention facility