Extrusion detection
Extrusion Detection is a branch of Intrusion Detection aimed at developing mechanisms to identify successful and unsuccessful attempts to use the resources of a computer system to compromise other systems. Extrusion Detection techniques focus primarily on the analysis of system activity and outbound traffic in order to detect malicious users, malware or network packets that may pose a threat to the security of neighboring systems.
While Intrusion Detection is mostly concerned about the identification of incoming attacks (intrusion attempts), Extrusion Detection systems try to prevent attacks from being launched from a system in the first place. They implement monitoring controls at leaf nodes of the network -- rather than concentrating them at choke points, e.g., routers -- in order to distribute the inspection workload and to take advantage of the visibility a system has of its own. The ultimate goal of Extrusion Detection is to identify attack attempts launched from internal systems in order to prevent them from reaching their target.
Extrusion Detection is also known as Outbound Intrusion Detection.
Related documents
1. "Extrusion Detection: Security Monitoring for Internal Intrusions"
2. "Stopping Spam by Extrusion Detection"
3. "Outbound Intrusion Detection"
 | This article has not been added to any content categories. Please help out by adding categories to it so that it can be listed with similar articles. |