# Extrusion detection

> Mediated Wiki article. Canonical URL: https://mediated.wiki/source/Extrusion_detection
> Markdown URL: https://mediated.wiki/source/Extrusion_detection.md
> Source: https://en.wikipedia.org/wiki/Extrusion_detection
> Source revision: 1355788525
> License: Creative Commons Attribution-ShareAlike 4.0 International (https://creativecommons.org/licenses/by-sa/4.0/)

**Extrusion detection** or **outbound intrusion detection** is a branch of [intrusion detection](/source/Intrusion_detection) aimed at developing mechanisms to identify successful and unsuccessful attempts to use the resources of a [computer system](/source/Computer_system) to compromise other systems. Extrusion detection techniques focus primarily on the analysis of system activity and outbound traffic in order to detect malicious users, [malware](/source/Malware) or network traffic that may pose a threat to the security of neighboring systems.

While intrusion detection is mostly concerned about the identification of incoming attacks (intrusion attempts), extrusion detection systems try to prevent attacks from being launched in the first place. They implement monitoring controls at leaf nodes of the network—rather than concentrating them at choke points, e.g., [routers](/source/Router_(computing))—in order to distribute the inspection workload and to take advantage of the visibility a system has of its own state. The ultimate goal of extrusion detection is to identify attack attempts launched from an already compromised system in order to prevent them from reaching their target, hereby containing the impact of the threat.

## External links

- ["Stopping Spam by Extrusion Detection"](http://www.cl.cam.ac.uk/~rnc1/extrusion.pdf)
- ["Outbound Intrusion Detection"](https://web.archive.org/web/20070427040753/http://citeseer.ist.psu.edu/mandujano04outbound.html)

---
Adapted from the Wikipedia article [Extrusion detection](https://en.wikipedia.org/wiki/Extrusion_detection) by Wikipedia contributors ([contributor history](https://en.wikipedia.org/wiki/Extrusion_detection?action=history)). Available under [Creative Commons Attribution-ShareAlike 4.0 International](https://creativecommons.org/licenses/by-sa/4.0/). Changes may have been made.
