Idp Technical Reference - ZyXEL Communications ZyWall USG 2000 User Manual

Chapter 34 IDP
destination port is the service port (53 for DNS in this case) that the attack tries to
exploit.
Figure 419 Custom Signature Log

34.9 IDP Technical Reference

This section contains some background information on IDP.
Host Intrusions
The goal of host-based intrusions is to infiltrate files on an individual computer or
server in with the goal of accessing confidential information or destroying
information on a computer.
You must install a host IDP directly on the system being protected. It works
closely with the operating system, monitoring and intercepting system calls to the
kernel or APIs in order to prevent attacks as well as log them.
Disadvantages of host IDPs are that you have to install them on each device (that
you want to protect) in your network and due to the necessarily tight integration
with the host operating system, future operating system upgrades could cause
problems.
600
ZyWALL USG 2000 User's Guide