lesson 3 ias

• play a crucial role in safeguarding sensitive data, systems, and networks from unauthorized access, breaches, and malicious activities. In this discussion, we will explore three types of information security controls: Audit Trails, Intrusion Detection Methods, and Checksums.

  Information security controls
• is a chronological record of system activities, including user actions, system events, and security-related incidents.

  Audit trails help organizations track and monitor user activities, identify security breaches or policy violations, and facilitate forensic investigations.


  Audit Trails
• are typically generated by logging systems and security monitoring tools, which record events such as login attempts, file accesses, configuration changes, and network traffic.

  Audit Trails
• are security mechanisms designed to detect and respond to unauthorized or malicious activities within a network or system.

  Intrusion detection methods help organizations identify potential security threats, such as unauthorized access attempts, malware infections, and network anomalies, in real-time or near real-time.

  Intrusion Detection Methods
• Types of Intrusion Detection Methods

  Signature-based intrusion detection

  Anomaly-based intrusion detection
• Compares network traffic or system activity against predefined signatures or patterns of known attacks

  Signature-based intrusion detection
• Analyzes normal behavior patterns and identifies deviations or anomalies that may indicate suspicious or malicious activity.

  Anomaly-based intrusion detection
• is a mathematical value computed from data to verify data integrity and detect errors or tampering during transmission or storage. Checksums help ensure data integrity by generating a unique checksum value for a file or message and comparing it to the original checksum value to detect any alterations or corruption.

  
  

  Checksum algorithms, such as MD5, SHA-1, and SHA-256, are commonly used to compute checksum values for files, documents, and network packets.


  Checksums