Intrusion and IDS Part II - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.

1. Predefined patterns or signatures used by the Snort IDS/IPS to detect specific types of network traffic indicative of known threats or attacks.
   Snort Rules
2. The constraints or weaknesses inherent in IDS technology, such as false positives/negatives, evasion techniques, and resource limitations.
   Limitations of Intrusion Detection Systems
3. Contrasting the functionalities and purposes of intrusion detection systems and intrusion prevention systems in network security.
   Comparison of IDS and IPS
4. An open-source web application firewall (WAF) that can also be used for intrusion detection and prevention in web-based environments.
   ModSecurity
5. A type of sensor in intrusion detection systems that monitors network traffic without actively interfering, typically through network taps or mirroring.
   Passive Sensor
6. A security tool that actively blocks or mitigates detected threats in real-time, as opposed to solely alerting like an IDS.
   Intrusion Prevention System (IPS)
7. Refers to the predominant method used to monitor and analyze network traffic for signs of unauthorized access or malicious activities.
   Primary Approach for Network-based Intrusion Detection
8. Refers to security measures that respond to detected threats or incidents after they occur, such as intrusion prevention systems.
   Reactive Security
9. The functioning of an IDS, including the collection, analysis, and reporting of suspicious network activity.
   Intrusion Detection System (IDS) Operation
10. An approach in intrusion detection where deviations from established rules or patterns are flagged as potential threats.
    Rule-based Anomaly Detection
11. The results produced by an intrusion detection system, including alerts, logs, and reports detailing detected threats or anomalies.
    IDS Outputs
12. An open-source intrusion detection and prevention system designed for high-performance network security monitoring and analysis.
    Suricata
13. A popular open-source intrusion detection and prevention system known for its rule-based detection capabilities and flexibility.
    Snort
14. A Linux distribution for intrusion detection, network security monitoring, and log management, integrating various open-source security tools.
    Security Onion
15. The strategic positioning of sensors within a network to maximize coverage and effectiveness in detecting intrusions.
    Sensor Placement
16. Analyzing and contrasting various intrusion detection systems currently offered by different vendors in terms of features, performance, and suitability for different environments.
    Market-available IDS Comparison
17. Formerly known as Bro, Zeek is an open-source network security monitoring tool focused on protocol analysis and traffic inspection.
    Zeek
18. A method used in intrusion detection systems (IDS) to identify known patterns of malicious activity or attacks within network traffic.
    Signature Detection
19. A powerful network analysis framework used for network traffic monitoring, packet analysis, and intrusion detection.
    Bro/Zeek
20. A type of sensor in intrusion detection systems that actively intercepts and analyzes network traffic in real-time.
    Inline Sensor
21. The routine tasks performed by an intrusion detection system, such as monitoring network traffic, analyzing patterns, and generating alerts.
    Typical Activities of an IDS
22. A network security platform that combines intrusion detection and prevention, firewall, and advanced threat protection capabilities.
    Cisco Firepower
23. An open-source security information and event management (SIEM) platform that includes intrusion detection capabilities.
    AlienVault OSSIM
24. Techniques employed to identify and analyze attempts to breach network security defenses, often involving simulated attacks to test system resilience.
    Penetration Identification Approach