|
|
Enterprise security
Security options used , limitations
* Network Firewalls provide perimeter defense, keeping malicious activity off the network. This does not account for damage caused from inside the network. Additionally, network firewalls work by examining network behavior, but even legitimate network traffic can exploit application and operating system vulnerabilities.
* Anti-virus Scanners examine files or email messages and look for matches to known attack signatures. As with all signature-based products, these scanners cannot deal with a new type of attack until it is known, a new signature is defined and then distributed by the vendor. Also, anti-virus scanners also cannot detect attacks that are not carried in files or email messages.
* Intrusion Detection Systems (IDS) work by examining various types of system behavior, (e.g. network traffic and system logs) looking for patterns that indicate attacks, and sending alerts. These signature-based systems only protect against attacks seen previously, and definitions of "normal" activity must be very loose to avoid generating too many false alarms.
|
|
