Analysis and Evaluation of Network-Based Intrusion Detection and Prevention System in an Enterprise Network Using Snort Freeware

Information Systems and Networks are subject to electronic attacks. Attempts to breach information security are rising every day, along with the availability of the Vulnerability Assessment tools that are widely available on the internet, for free, as well as for a commercial use. Tools such as SubSeven, BackOrifce, Nmaps, L0ftCrack, can all be used to scan, identify, probe, and penetrate systems on the network. Firewalls are put in place to prevent unauthorized access to the Enterprise Networks. Unfortunately, firewalls alone are not enough to protect our systems. This paper describes the characteristics of Network-Base IDPS technologies, outlines the necessity of the implementation of Intrusion Detection Systems in the enterprise environment and a brief evaluation of Snort® Freeware technology.