Host intrusion defense systems detect and prevent cyber attacks that bypass or penetrate perimeter security. They are increasingly recognized as a security best-practice, and an integral part of a defense-in-depth strategy. Driven by the growing awareness of targeted attacks and the insider threat, by virtualization security concerns, pressures from PCI and other regulations and standards, and by high profile security breaches, many organizations are now actively evaluating the merits of investing in a host intrusion defense system to complement their existing IT security systems.

This white paper provides qualitative benefits and cost justification frameworks that organizations can reference when creating the business case for a host intrusion defense system.