What is the difference between an Intrusion Prevention System (IPS) and A Network Behavior Analysis (NBA) System?
Network behavior analysis (NBA) provides network-wide visibility and can be used to detect behaviors that may be missed by methods, such as intrusion prevention systems. This visibility can be used to identify worms, unauthorized protocols and suspicious behavior. Intrusion Prevention Systems work based on a known set of attack signatures. If the attacks have legitimate content but illegitimate intent, IPS fails.
