Intrusion Prevention System(IPS) and Its Detailed Funtion – SOC/SIEM

Like an intrusion detection system (IDS), an intrusion prevention system (IPS) screens network traffic.An Intrusion Prevention System (IPS) is a framework that screens a network for evil exercises, for example, security dangers or policy compliance.

Vulnerability exploits normally come in the form of malicious inputs to an objective application or resources that attacker uses to block and pick up control of an application or System.


For instance, an IPS may drop a packet that it decides to be noxious and hinder all further activity from that IP address or port, although there is no impact on genuine traffic.

Read More at GBHackers On Security