Host-based Intrusion Detection System (HIDS)

Intrusion Detection is a complex business. Over the years, hackers have found many ways to gain access and take over network nodes. While Network Intrusion Detection Systems (NIDS) detect malicious activity across the network, very specific activity may slip through as new nodes are added or changed. Real-time network awareness that ensures compliance is crucial to total network security. Adding a Host–based Intrusion detection system (HIDS) ensures total protection and compliance as nodes are added to or changed on the network. The need for additional technical resources with direct experience in network security, or simply the desire for increased efficiency of existing resources are the primary reasons for obtaining a managed HIDS.

Managed HIDS – Clone Guard^® CG-HIDS

Host intrusion detection systems are installed locally on host machines. The HIDS monitors and analyses the internals of a computing system rather than the network packets on its external interfaces. It then detects which programs access what resources and discovers anomalous activity. The HIDS consults several types of log files (kernel, system, server, network, firewall, and more), and looks for attacks that take over particular system resources, such as: keystroke logging, identity theft, spamming, botnet activity, and spyware-usage. It compares the activity against an internal database of common signatures.

To properly protect every node on the network an in-depth understanding of network activity is a must. A Managed Host-based IDS that’s developed, maintained, and supported by Clone Systems^® off-loads the complexities of activity detection and reporting while providing essential security 24x7x365. Our Certified Security Engineers have the necessary skills to create a solid security package that best suits your business requirements. Our knowledgeable team can work collaboratively with your staff, as well as with external vendors, ensuring seamless product solution delivery. Clone Systems’ managed HIDS solution properly secures your business by evaluating, identifying, and reporting potentially malicious activity towards every node on your network.

Our team of security professionals possess certifications from all leading vendors and have in depth experience managing event log monitoring in highly complex environments. This enables your business to utilize best of breed technology, while leveraging Clone Systems' professionals as a natural extension of your network security team.

CG-HIDS Solution Features

Monitor log files such as kernel, system, server, network, firewall
Threat detection notification
Monitor system resources such as: keystroke logging, identity theft, spamming, botnet activity, and spyware-usage
Real-time network awareness
Immediate compliance
24x7x365 real-time event log monitoring
Scheduled upgrades, including critical patches
High Availability support
Initial consultation to evaluate normal behavior on your network
Co-managed options available
Security Information Portal (SIP) access, online support tickets, availability reports
Track and log access to critical resources (accountability)
Meet regulatory control and standards requirements for PCI, NERCCIP, GLBA/FFIEC, HIPAA, SOX, and ISO 17799