IDS Concepts

• Data repository – central store of information used to correlate data between remote points for aggregation

• Sensors – distributed set of listeners that pick up individual, possibly related, possibly unrelated, anomalous traffic patterns

Notes: