Network Intrusion Detection Systems

The Information Security Office (ISO) operates several "Intrusion Detection Systems” (IDS) to detect and respond to information security incidents involving computers connected to the campus network. These automated systems monitor and analyze network traffic and generate alerts in response to activity that either matches known signatures for malicious activity or is anomalous. Alerts are reviewed by ISO security analysts, and if warranted notifications are sent to designated security contacts for investigation and remediation.