Best Practice Detail

13-9-8073

Network Operators, Service Providers, and Public Safety should deploy Intrusion Detection/Prevention Tools (IDS/IPS) with an initial policy that reflects the universe of devices and services known to exist on the monitored network. Due to the ever evolving nature of threats, IDS/IPS tools should be tested regularly and tuned to deliver optimum performance and reduce 0 positives.

Status: Rollover New

References/Comments: NIST SP800-94 Guide to Intrusion Detection and Prevention Systems (IDPS) http://csrc.nist.gov/publications/nistpubs/800-94/SP800-94.pdf.

Historical events:

Network Operators
Service Providers
Public Safety
Internet/Data
Satellite
Cyber Security
Network Operations
Security Systems
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII