test

Question 1

What is a Host Intrusion Detection System (HIDS)?

Answer 1

software that runs on an endpoint computer and can detect attacks

Question 2

Host intrusion prevention systems (HIPS)

Answer 2

An intrusion prevention system detects and stops harmful activities. A host intrusion prevention system (HIPS) watches over your device, blocks threats, and lets you know if action is needed.

Question 3

A HIDS uses agents installed on the device to monitor its activity closely. It typically tracks:

Answer 3

System Calls: Requests made by programs to the operating system. HIDS checks these requests to spot suspicious behavior.

File Access: Ensures that files are accessed for legitimate reasons and not for malicious purposes.

Input/Output: Watches all data exchanges. For example, if a device that doesn’t use instant messaging suddenly tries to connect via IM, HIDS will flag this as unusual.