Operating System » Security Intrusion Detection
Operating System Subcategories
Memory Management Swapping 1Process Scheduling Queue
Virtual Memory Page Replacement Algorithms 1Linux
Cpu SchedulingMemory Management
Computer FundamentalsCpu Scheduling Benefits
Threads Signal HandlingThreads Ult Klt
Distributed Operating SystemBasics
Operating SystemProcesses
Cpu Scheduling Algorithms 1Cpu Scheduling Algorithms 2
DeadlockDeadlock Avoidance
Memory Management Swapping 2Memory Allocation 1
Secondary StorageMemory Management Paging 1
Memory Management Paging 2Rtos
Multimedia System Cpu Disk SchedulingSecurity Intrusion Detection
Virtual Memory ThrashingFile System Interface Access Methods 1
File System Interface Directory Structure 1File System Interface Directory Structure 2
File System Interface Mounting SharingFile System Allocation Methods 1
Disk Scheduling 2Disk Management
Classic Sync ProblemsSemaphores 1
Process CreationMultimedia System Network Management
Semaphores 2Cpu Scheduling 2
Application Io Interface 1Inter Process Communication
Process SynchronizationMultimedia System Compression 1
Network File System 1Disk Scheduling 1
Mass Storage Raid 1File System 1
Communication Systems Bandwidth Transmission MediumSecurity Cryptography
Two Port NetworkProcess Rpc
Virtual Memory Page Replacement Algorithms 2Virtual Memory Frame Allocation
Network File System 2File System Allocation Methods 2
File System Allocation Methods 3Process Control Block
Process StructuresCritical Section Problem
Process Sync MonitorsAtomic Transactions
Deadlock RecoveryMemory Allocation 2
Memory Management SegmentationApplication Io Interface 2
Kernel Io SubsystemsMultimedia System Compression 2
Multimedia System Compression 3Security User Authentication
Security Program System ThreatsSecurity System Facility
Threads Fork ExecThreads Cancellation
Threads PoolsMulti Threading Models
Virtual Memory Demand PagingVirtual Memory
File System ConceptsFile System Implementation
File System Interface Access Methods 2File System Recovery
Io SubsystemSwap Space Management
Mass Storage Raid 2Mass Storage Tertiary Storage
Protection ConceptsProtection Access Matrix
SecurityProtection Memory Protection
Protection Revocation Access RightsNetwork Structure Topology
RobustnessDistributed File System
Distributed SynchronizationDeadlock Prevention
Deadlock DetectionThreads
File System Interface ProtectionFile System Free Space Performance
What are the characteristics of Host based IDS?

A. The host operating system logs in the audit information
B. Logs includes logins,file opens and program executions
C. Logs are analysed to detect tails of intrusion
D. All of the mentioned

What are the different ways to intrude?

A. Buffer overflows
B. Unexpected combinations and unhandled input
C. Race conditions
D. All of the mentioned

What are the major components of the intrusion detection system?

A. Analysis engine
B. Event provider
C. Alert database
D. All of the mentioned

What are the different ways to classify an IDS?

A. Zone based
B. Host & network based
C. Network & zone based
D. Level based

What are the characteristics of anomaly based IDS?

A. It models the normal usage of network as a nosie characterization
B. It doesn’t detect novel attacks
C. Anything distinct from the nosie is not assumed to be intrusion activity
D. It detects based on signature

What is the major drawback of anomaly detection IDS?

A. These are very slow at detection
B. It generates many false alarms
C. It doesn’t detect novel attacks
D. None of the mentioned

What are the characteristics of signature based IDS?

A. Most are based on simple pattern matching algorithms
B. It is programmed to interpret a certain series of packets
C. It models the normal usage of network as a nosie characterization
D. Anything distinct from the nosie is assumed to be intrusion activity

What are the drawbacks of signature based IDS?

A. They are unable to detect novel attacks
B. They suffer from false alarms
C. They have to be programmed again for every new pattern to be detected
D. All of the mentioned

What are the drawbacks of the host based IDS?

A. Unselective logging of messages may increase the audit burdens
B. Selective logging runs the risk of missed attacks
C. They are very fast to detect
D. They have to be programmed for new patterns

What are the strengths of the host based IDS?

A. Attack verification
B. System specific activity
C. No additional hardware required
D. All of the mentioned