Talk:Intrusion detection system

IDS Terminology

IDS stans for intrustion detection system. This section needs to be cleaned up. It should not just be a list of terms. One suggestion would be to integrate this terminology into the other sections. --71.90.69.48 (talk) 05:14, 4 March 2009 (UTC)--71.90.69.48 (talk) 05:14, 4 March 2009 (UTC)

IDS Evasion

I've fleshed out the IDS evasion section - and since it was about the same size as the rest of the IDS section, I put it on its own page. The 'IDS Evasion with Unicode' link is also on the new page. --Sgorton 21:15, 5 February 2007 (UTC)

Merge with NIDS

While it's good that there’s a separate article on the network-side of IDS, I don't think its worthy of its own page (especially seeing how small the NIDS page is, 3 paragraphs). Since NIDS is the networking part of IDS, and we have this page on IDS, I believe we should incorporate the NIDS page into this one as its own section, and have a redirect from NIDS to here. Ghostalker 21:28, 7 April 2007 (UTC)

I tagged the articles appropriately. I'm neutral on the merge. -- intgr 21:40, 7 April 2007 (UTC)

I agree with the merge proposals. -- Rama

I also agree with the merge proposal --Sgorton 18:05, 1 May 2007 (UTC)

Not all intrusion detection systems are network-based. There are also host-based intrusion detection systems. For that reason, if they are merged, you need to be clear to which kind you're refering. KD 18:59, 12 May 2007 (UTC)

I would suggest only merging the NIDS if you're going to merge all major types (e.g. Network-based, Host-based, Application-based, Signature-based, Statistical Anomoly-based) of IDS into this article--otherwise, it makes more sense to have separate pages and links. (User mmh6577)

I concur with mmh6577. We'd be better off expanding the NIDS page, e.g. moving there all the network-related stuff, and linking properly here all the content for Host IDS, etc. Mauro Cicognini 15:06, 12 June 2007 (UTC)

I enjoyed a clear definition of nids on a separate page. If merge pages, please let nids as a clearly marked chapter.

NIDS and HIDS are two subsections of IDS and as such should be separate chapters.

1. IDS - 2 basic types:

  A.  NIDS (Network based)
  B.  HIDS (Host based)

I dont approve of merging the NIDS article to preserve the hierarchy & the structure of the main article the "IDS" if u want to merge the "NIDS" u'll have to add the other articles "PIDS" , "APIDS" to the main one. Marco C.

I think it will be better to leave them as it it is and let IDS point to NIDS as there is a relation.

Any way a clear definition of IDS which at present is given is a must —The preceding unsigned comment was added by 203.78.221.48 (talk) 19:22, August 23, 2007 (UTC)

Against Merging--an IDS is not just a NIDS, as was mentioned above Anapologetos (talk) 12:50, 4 March 2008 (UTC)

Against merging because both pages will probably be growing soon. --Clangin (talk) 15:49, 4 July 2008 (UTC)

I am also against merging. I think the current IDS page should define the fundamentals on how it works and keep the more in-depth explanation to the respective pages (NIDS/HIPS/etc). Breadtk (talk) 20:46, 10 August 2009 (UTC)

Wikipedia IDS page example

Hello, you can see what is done on the french version of this similar page: http://fr.wikipedia.org/wiki/Syst%C3%A8me_de_d%C3%A9tection_d%27intrusion —Preceding unsigned comment added by Toady (talk • contribs) 15:41, August 24, 2007 (UTC)

Analogy

I find the analogies of firewall = locks, ids = burglar alarm quite useful. Is it worth adding this in somewhere? —Preceding unsigned comment added by Segrub (talk • contribs) 09:44, 22 April 2008 (UTC)

intrusion detection or intrusion-detection?

Both are used in the article, please decide on one and then use it throughout the article. Also see Intrusion-prevention system. ItchyDE (talk) 14:15, 15 September 2008 (UTC)

IMHO, the correct term is without the "-"; at least that's the way I've seen it in most sources (eg: NIST 800-series guide). Regards, DPdH (talk) 16:19, 2 September 2009 (UTC)