Active Security Or: How I learned to stop worrying and use IPS with Incident handling

A highly customized use of Intrusion Prevention Systems (IPS) will benefit organizations throughout the incident handling process. Considerations for incident preparation, identification, containment, eradication, recovery, and lessons learned are provided. This paper focuses on the HP TippingPoint IPS technology in the incident handling framework. Intrusion prevention has a critical role feeding information into the narrative any security incident, and improving the overall security posture of the protected organization.