WHY USE AN IDS?
IDS prevent from problem behaviors by increasing the perceived risk of discovery and punishment. Detect the attacks and other security violations. Detect and at the same time deal with preambles to attacks. Document the existing threat to an organization. Act as quality control for security design and administration, especially of complex and large enterprises and provide useful information about intrusions which take place.
The following are reasons for an organization to install IDS
1. They serve as straightforward deterrent measures.
2. They cover organization when its network fails to protect against known vulnerabilities.
3. They help administrators detect the preambles to attacks.
4. They serve to document the scope of the threats an organization face
5. They help in quality assurance and continuous improvements of the organization