Implementation of breach detection systems (BDS) can be complex, with multiple factors affecting the overall performance of a solution. The following factors should be considered over the course of the useful life of the product:

• Where will it be deployed?
• What is the predominant traffic mix?
• What security configuration/policy is applied?

There is frequently a trade-off between security effectiveness and performance. Because of this trade-off, it is important to judge a product’s security effectiveness within the context of its performance and vice versa. This ensures that new security protections do not adversely impact performance and that security shortcuts are not taken to maintain or improve performance.