IDS Features
The features available in an IDS include:
• Intrusion detection
• Ability to gather evidence on intrusive activity
• Automated response (e.g., termination of connection, alarm messaging)
• Security policy
• Interface with system tools
• Security policy management
IDS Limitations
An IDS cannot help with the following weaknesses:
• Weaknesses in the policy definition (see Policy section)
• Application-level vulnerabilities
• Back doors into applications
• Weaknesses in identification and authentication schemes