Reputation: 2404
Is there a solution for an intrustion detection system on the AWS platform? Would you have to go 3rd party or do they have their own offering?
Thanks!
Upvotes: 0
Views: 376
Reputation: 3773
Snort is a well known Intrusion Detection System. Bro is another well known IDS
Upvotes: 0
Reputation: 6413
Your question is very general. IDS systems look a bit different in the cloud compared to on-premise "traditional" setups and AWS provides a wide array of options in the security area for example: IAM, CloudTrail & VPC Flow Logs. They can serve as building blocks for IDS depending on what you want to achieve.
If you are asking about more "traditional" IDS systems (network-sniffing boxes), there are lots of solutions available on AWS Marketplace via partners, for example: Sophos, AlertLogic, TrendMicro, CloudPassage.
The best recommendation I could give you is watching below videos to get a better overview what are your options:
AWS re:Invent 2015 | (SEC205) Learn How to Hackproof Your Cloud Using Native AWS Tools
AWS re:Invent 2014 | (SEC402) Intrusion Detection in the Cloud
Intrusion Detection in the Cloud (SEC402) | AWS re:Invent 2013
Upvotes: 1