CODEWITHSUNDEEP
amazon-web-servicessecurityamazon-ec2
user12435479
user12435479

Reputation:

Does AWS provide any IDS/IPS in their services or Suggest some budget friendly 3rd party services

Looking for budget friendly IDS/IPS for my servers.The time frame would be once in three months. Are there any services i can use to run a test once in 3 months and pay for that particular period of time

Upvotes: -1

Views: 5020

Answers (2)

Aravind GV
Aravind GV

Reputation: 37

Top 3 Intrusion Detection & Prevention Systems are

  1. Snort is the World's most powerful IPS & can be used as As packet sniffer,as a packet logger,as a full NIDS
  2. Suricata is the leading independent open source threat detection engine by combining: Intrusion Prevention and Detection,Network Security Monitoring and PCAP Processing
  3. CrowdSec is a free, open-source, and collaborative IPS.It does Analyze behaviors,Respond to attacks,Share signals across the community

Upvotes: -1

Juned Ahsan
Juned Ahsan

Reputation: 68715

There are services like AWS Shield and AWS WAF that you can use for IDS/IPS.

AWS Shield

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. AWS Shield provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection. There are two tiers of AWS Shield - Standard and Advanced.

AWS WAF

AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources. AWS WAF gives you control over how traffic reaches your applications by enabling you to create security rules that block common attack patterns, such as SQL injection or cross-site scripting, and rules that filter out specific traffic patterns you define. You can get started quickly using Managed Rules for AWS WAF, a pre-configured set of rules managed by AWS or AWS Marketplace Sellers. The Managed Rules for WAF address issues like the OWASP Top 10 security risks. These rules are regularly updated as new issues emerge. AWS WAF includes a full-featured API that you can use to automate the creation, deployment, and maintenance of security rules.

You can also buy third-party software that you can run on EC2 instances for IDS/IPS.

Intrusion Detection & Prevention Systems

EC2 Instance IDS/IPS solutions offer key features to help protect your EC2 instances. This includes alerting administrators of malicious activity and policy violations, as well as identifying and taking action against attacks. You can use AWS services and third party IDS/IPS solutions offered in AWS Marketplace to stay one step ahead of potential attackers.

Upvotes: 1

Related Questions