JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD B.Tech IV INTRUSION DETECTION SYSTEMS Previous Question Paper (January/February - 2023 - R18)

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and an untrusted external network, such as the internet, to prevent unauthorized access while allowing legitimate communication.

Intrusion Detection is the process of monitoring and analyzing the events occurring in a computer system or network to identify unauthorized activities or violations of security policies. It functions as a security mechanism that detects attempts to compromise the confidentiality, integrity, or availability of a resource.

The process involves three primary steps: monitoring system activities and network traffic, analyzing the collected data for patterns or signatures indicative of malicious behavior, and responding by alerting administrators or taking automated actions to mitigate the threat. By identifying anomalies or known attack signatures, it provides visibility into potential security breaches that traditional firewalls might overlook.