Traditional security products have focused on the biggest threats that emerged as computer networking, email and web applications were adopted by corporations. These technologies do not address new attacks that ride over existing protocols to attack applications, or new content-based attacks that attack systems before vendors are able to release and distribute signatures and other countermeasures. For the control system environment the underlying theme for intrusion prevention has to be around Day-Zero attacks being managed. IPS is a new technology category that focuses on taking a proactive approach to both IT and control network security by preventing attacks on multiple network resources, as opposed to similar technologies that merely detect and report on attacks that have already taken place. Intrusion prevention can be thought of as the logical follow-on to signature-based technologies such as IDS and anti-virus, and to network-oriented protection solutions such as firewalls. Like an IDS, an IPS can run in host mode directly on the control system station, and the closer to the control system it is, the better the protection.<\/p>\n","protected":false},"excerpt":{"rendered":"
Best practices should include:
\n– Host-based protection.
\n– Real-time prevention decisions.
\n– Defense in depth.
\n– Real-time correlation.
\n– Behavioral approach.
\n– Flexibility.
\n– Ease of deployment.
\n– Centralized event management.
\n– Platform coverage.
\n– Administration. <\/p>\n
http:\/\/www.cioupdate.com\/article.php\/3582536<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-121","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=121"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/121\/revisions"}],"predecessor-version":[{"id":2608,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/121\/revisions\/2608"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}