z/OS Communication Server Intrusion Detection Services

Project and Program: Enterprise Data Center, Communications Server

Tags: Proceedings, 2015, SHARE in Seattle 2015

There are many types of intrusion detection systems being deployed today, and each type has its own set of advantages. The z/OS Communications Server provides an integrated Intrusion Detection Service (IDS) for TCP/IP. Using the IDS, the Communications Server exploits its position as a communications endpoint, in order to detect attacks on z/OS that otherwise might go undetected by traditional network-based intrusion detection systems.
In this session we will describe the Communications Server IDS, and how it may be used to detect intrusion attempts against z/OS. The session will cover: • The IDS architecture
• The types of attacks detected
• The defensive and notification actions that occur when an intrusion attempt is detected
• IDS policy configuration using the Configuration Assistant for z/OS Communications Server
-Lin Overby-IBM Corporation

Back to Proceedings File Library