Intrusion Detection System
Did you know that cyber attackers lurk on networks long before they actually steal any data, or before you even know they’re there?
That’s why deception technology (such as honeypots) is vital, as it improves the detection of breaches, so that mitigation can begin.
"*" indicates required fields
Cyber attackers are often present on networks long before they actually exfiltrate any data!
Our intrusion detection system is convincing to attackers, simple to set up and extremely low noise. By partnering with Thinkst, we’re able to sprinkle canaries throughout the network and configure them to look like valuable content. Once probed, you’ll immediately receive an alert and our security team will get to work intercepting, investigating and mitigating the breach.
Canarytokens are included with every intrusion detection solution. These simple assets can take the form of files, folders, DNS hostnames, API endpoints or URL’s. They should be deceptively named, for example “Salaries and Bonuses.docx” and spread across your fleet or hidden in online locations. If a malicious (or simply nosy) attacker finds one, they’ll trigger an alert, allowing your team to mitigate and remediate before any real data is stolen, leaked, encrypted or ransomed.
Key Features
Improved detection and mitigation of cyber-security breaches
Multiple alerts for immediate notification and action
Detect and mitigate lateral movement within the trusted local-area network (LAN)
Simple and easy to use (can be set up in minutes even on complex networks)
Convincing to attackers, simple to set up and extremely low noise.
Frequently Asked Questions
What is an intrusion detection system?
An intrusion detection system (sometimes called a breach detection system) is a combination of security technology and measures designed to detect infected devices, malware, and other threats inside the company network. It is a defensive tool that detects malicious activity inside a network after an intrusion has occurred.
Why is an intrusion detection service important?
Regardless of the network security systems your company has in place, it is a matter of “when” rather than “if” a hack occurs. Responding quickly after a breach is critical to minimise the damage that can be done. The sooner you are aware of a data breach, the sooner you can plug the hole.
Using an intrusion detection service will not only alert you when the network has been compromised, but it will collect invaluable data your business can use to protect itself from future intrusions.
Furthermore, these solutions incorporate sophisticated threat detection algorithms that detect any untoward actions from employees, especially those who might have become disgruntled with the organisation and are looking to steal or compromise data.
What are the differences between intrusion detection systems and intrusion prevention systems?
An intrusion detection system monitors network traffic and identifies patterns of suspicious activity. If it detects potential threats, it will assume the network is under attack and send out an alert.
Essentially, it inspects all inbound and outbound network activity and acts as a security check on all transactions that take place in and out of the system.
A firewall performs actions such as the blocking and filtering of traffic based on a set of pre-configured rules. So, while an IDS (Intrusion Detection System) can only report an intrusion, an IPS (Intrusion Prevention System) can block unauthorised access.
Should I still get an intrusion detection system if my organisation has a firewall and antivirus solution installed?
An intrusion detection solution is critical to detect intruders that have managed to bypass the defences of the firewall and antivirus. It is critical to minimise the amount of time an attacker has on your network and having a intrusion detection system means you will be alerted as soon as non-conforming behaviour (such as that of a hacker) is detected.
What is a honeypot when it comes to intrusion detection systems?
Deception technology, such as honeypots, is vital to improve the detection of breaches. A honeypot looks like a real system with applications and data. However, it is designed to detect, deflect, and even counteract unauthorised access to the network. It lures hackers into the system, that is typically ring-fenced from the broader network, to see how they gained access and use that to shore up the business defences. In other words, a network intrusion detection system will complement your existing security infrastructure.
How much does an intrusion detection system cost?
As the requirements for each organisation are unique, please complete our enquiry form and one of our expert consultants will contact you about the best intrusion detection solution in South Africa.
Is the intrusion detection system available outside South Africa?
Currently our network intrusion detection systems are only available to our South African customers.
