Next generation intrusion detection: an update on Cloudflare’s IDS capabilities
Jun 21, 2022Annika Garbers
Summary
This post announces the private beta of Cloudflare's Intrusion Detection System (IDS) capabilities. It details how the IDS operates across all network traffic (IP port or protocol), leveraging Cloudflare's global Anycast network for software-based deployment, thus removing hardware constraints like capacity planning, location planning, and maintenance downtime. The system integrates threat intelligence from open-source feeds (e.g., Suricata) and Cloudflare's network vantage point, with further augmentation from the new Threat Intel team. The goal is to provide comprehensive threat monitoring without performance bottlenecks or alert fatigue.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack