Describe the configuration of whitelisting and blacklisting

Assignment: Draft of Training Manual- Intrusion Detection

Overview

The next part of your training manual will focus on intrusion detection and prevention. An intrusion detection system (IDS) is a network security technology originally built for detecting vulnerability exploits against a target application or computer. Continue the development of your training manual with an overview of the assigned topic and a summary of functions and capabilities. Demonstrate your implementation with corresponding screenshots from your labs (when applicable).

Prompt

Now it is time to create your training manual section on the configuration of detecting intrusions. Network intrusion detection systems are placed at strategic points within the network to monitor traffic to and from all devices on the network. Continue using the Training Manual Template document to develop the section on intrusion detection services.

In each section of the training manual, develop guidelines for employees to select and employ specific software, tools, and methods to address the elements of the section topic. Your guidelines serve as recommendations of specific tools and criteria for determining when to use these tools.

Specifically, the following critical elements must be addressed:

Question 1. Describe the configuration of whitelisting and blacklisting.

Question 2. Give an overview of IDS placement.

Question 3. Summarize the key aspects of monitoring, logging (auditing), and alerting using intrusion detection systems.