z/OS Communication Server Intrusion Detection Services

Project and Program: Enterprise Data Center, Security and Compliance

Tags: Proceedings , 2016 , SHARE in San Antonio 2016

There are many types of intrusion detection systems being deployed today; and each type has its own set of advantages. The z/OS Communications Server provides an integrated Intrusion Detection Service (IDS) for TCP/IP. Using the IDS; the Communications Server exploits its position as a communications endpoint; in order to detect attacks on z/OS that otherwise might go undetected by traditional network-based intrusion detection systems.
In this session we will describe the Communications Server IDS; and how it may be used to detect intrusion attempts against z/OS. The session will cover: • The IDS architecture
• The types of attacks detected
• The defensive and notification actions that occur when an intrusion attempt is detected
• IDS policy configuration using the Configuration Assistant for z/OS Communications Server
-Lin Overby-IBM Corporation

Back to Proceedings File Library