Host intrusion prevention: Part of the operating system or on top of the operating system?

doi:10.1016/j.cose.2005.07.004

Computers & Security

Volume 24, Issue 6, September 2005, Pages 440-442

https://doi.org/10.1016/j.cose.2005.07.004 Get rights and content

Abstract

Instrusion prevention systems (IPS) are becoming essential for securing information technology (IT). However, IPS will never become a fully integral part of the operational system, because of the complexity of the problem, the changing nature of threats, and the dependence of IPS on the particulars of the applications being protected. But certain IPS functionality is likely to move into the operating system, namely innate defenses that offer simple protection against vulnerability classes, and IPS plumbing, i.e. the IPS components that are currently in kernel modules. The integration of these aspects of IPS with the operating system will result in an OS that is more adaptable and easier to develop new innovative IPS technologies upon.

Section snippets

References (0)

Cited by (0)

Steven Hofmeyr is the founder of Sana Security, which is a market leader in intrusion prevention with its host-based products widely deployed throughout industry and government. Hofmeyr has also carried out research at the Artificial Intelligence Laboratory at the Massachusetts Institute of Technology (MIT) and the Santa Fe Institute for Complexity Studies. His research focused on developing novel security systems based on studying the crossover between security and immunology. In 2003, MIT's Technology Review named him as one of the top young innovators under 35 and in 2004 he was named on of the 12 innovators of the year by Infoworld. Hofmeyr has a doctorate in Computer Science from the University of New Mexico.

View full text