Intrusion Prevention Fundamentals

Host Intrusion Prevention System (HIPS) products have two essential elements:

• A software package installed on the endpoint to protect it, called a client or agent.

• A management infrastructure to manage the agents.

This chapter divides the two major elements into subcomponents, describes them, and illustrates functional approaches for each. Real-world HIPS products are used as practical examples.