Cited by 1,279Network Security and Intrusion DetectionNetwork Packet Processing and OptimizationArtificial Immune Systems Applications

Guide to Intrusion Detection and Prevention Systems (IDPS)

Open access
Scarfone, K A, Mell, P M·2007

Abstract

The Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analysis to advance the development and productive use of information technology.ITL's responsibilities include the development of technical, physical, administrative, and management standards and guidelines for the cost-effective security and privacy of sensitive unclassified information in Federal computer systems.This Special Publication 800-series reports on ITL's research, guidance, and outreach efforts in computer security and its collaborative activities with industry, government, and academic organizations.Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately.Such identification is not intended to imply recommendation or endorsement by the National Institute of Standards and Technology, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.6028/nist.sp.800-94

Cites

2 of 2 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • At the process layer, protection technologies such as firewalls, intrusion detection systems, and role-based access controls are required to align with defined policies to provide concrete safeguards.

    “At the process layer, protection technologies like firewalls, intrusion detection systems, and role-based access controls are required to align with defined policies to provide concrete safeguards [7].”

    From Seamless Industry 4.0 Integration: A Multilayered Cyber-Security Framework for Resilient SCADA Deployments in CPPS (2023) · cites this paper as [7]

    Section 9.1.3 says security policies specify features an IDPS needs to provide, and §8.3.3 describes firewalls as complementary security controls. The copy does not establish a “process layer” requiring firewalls, IDPSs, and role-based access controls collectively to align with policies; in particular, it does not identify role-based access control as part of that framework. (LLM, conf=0.85)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Part of this paper’s reference list could not be split into single entries.

Flagged first, then by citations

Cited by

Sorted by citations

Authors
Scarfone, K. A., & Mell, P. M.
Affiliations
National Institute of Standards and Technology (US)
Published
2007
OpenAlex
W2678934292
Cited by
1,279
References
2
Citations by year
2026: 81 · 2025: 92 · 2024: 64 · 2023: 56 · 2022: 61 · 2021: 63 · 2020: 70 · 2019: 86 · 2018: 77 · 2017: 78 · 2016: 84 · 2015: 76 · 2014: 82 · 2013: 91 · 2012: 71
Type
report
Language
en
Open access
Licence
public-domain
Funders
  • U.S. Department of State
  • Cisco Systems
  • National Institute of Standards and Technology
  • Army Research Laboratory
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
  • Physical Sciences › Computer Science › Hardware and Architecture › Network Packet Processing and Optimization
  • Physical Sciences › Engineering › Biomedical Engineering › Artificial Immune Systems Applications
Keywords
intrusion detection systems, intrusion prevention systems, network security, cybersecurity, security testing, security standards

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review