What is the difference between false positives on network-based intrusion prevention systems (NIPS) and false positives on netwo

Question

3 years ago

15

What is the difference between false positives on network-based intrusion prevention systems (NIPS) and false positives on netwo

rk-based intrusion detection systems (NIDS)? (Select all that apply.) False positives on NIDS are just annoyances; false positives on NIPS cause service outages. False positives on NIPS are just annoyances; false positives on NIDS cause service outages. False positives on NIDS are more common than on NIPS, so you will likely see more of them. False positives on NIPS are more common than on NIDS, so you will likely see more of them.

Computers and Technology

2 answers:

Vlad1618 [11] · Answer 1 · 2022-03-14T07:43:27+03:00

Answer:

False positives on NIDS are just annoyances; false positives on NIPS cause service outages.

Explanation:

At first glance, NIDS and NIPS look quite similar, however, there is a clear difference, one is a passive monitoring and detection system that is limited to sounding an alarm on an anomaly or a combination of signatures, and the other is a active prevention system that takes proactive action when detecting a malicious package. A NIPS is usually in line (between the firewall and the rest of the network) and takes proactive action based on the set of rules provided to it. In the case of an NIDS, the device / computer is not normally in line, but it can obtain traffic mirrored from a network or mirrored port.

These differences contribute to the different results between false positives in network-based intrusion prevention systems (NIPS) and false positives in network-based intrusion detection systems (NIDS). That's because NIPS false positives are just annoyances whereas NIPS false positives cause service interruptions.

erma4kov [3.2K] · Answer 2 · 2022-03-14T05:47:42+03:00

Answer:

False positives on NIPS are just annoyances; false positives on NIPS cause service outages.

Explanation:

NIPS as its name says, are only prevention, a false positive cause only a false alarm in case of.

On the other hand, NIDS are more seriously because they detect the intrusion itself and most of them lock the system so the intrusion won´t repercuse the company, this is why it can cause service outages.