As intrusions
into enterprises become more prevalent, it has become clear that
intrusion detection systems are an integral part of an organization's
infrastructure. Large government organizations and major companies
have deployed, or are in the process of deploying, enterprise-wide
IDS or IPS solutions. This session will discuss their differences
and how organizations should administer these systems, specifically
relating the lecture to companies that are presently experiencing
numerous obstacles related to deployment, management, data collection,
and data correlation. This seminar will shed some light on the
need for these systems, deployment challenges, managing agents
in a distributed environment, and the use of collected data. It
will also discuss some “real-world” encounters of
larger companies and provide practical data for performing audits
of these systems. TDI will provide ISACA with a two-day training
seminar on intrusion detection systems. Our experienced lecturer
will deliver this training using our proven training methodology.
Participants in the seminar will learn the following:
• Explanation of an intrusion detection system
• Why we need to use the technology
• IDS evolution
• The current market players
• Network intrusion detection systems
• Host-based intrusion detection systems
• Other types of intrusion detection systems
• Auditing and detection
• The future of IDS
• “Real-world” accounts and experiences
• How to audit an IDS
Throughout the training, the goal will be to impart enough knowledge
about IDS such that the participants leave with the following:
• A keen understanding of IDS
• Published articles and technical white papers
• Experience with a live demonstration of IDS
• Awareness of industry tools and related resources
• The ability to select the appropriate IDS
• Understanding of how to audit an IDS
