Information Security Research Library

News of successful network attacks has become so commonplace that they are almost no longer news. Hackers have broken into commercial sites to steal credit card information and into defense industry sites in search of top-secret military plans. Recent denial-of-service (DoS) attacks have made sites unavailable to legitimate users. Firewall and intrusion prevention systems across various enterprise networks routinely log hundreds of hacker attempts a day. To prevent successful attacks, two key detection approaches have evolved: signature-based and anomaly-based network behavior analysis (NBA). This E-Guide details each approach along with the pros and cons.