Intrusion Detection System (IDS)
Search Security, Tuesday, July 16th, 2024
An intrusion detection system monitors (IDS) network traffic for suspicious activity and sends alerts when such activity is discovered.
Anomaly detection and reporting are the primary functions of an IDS, but some systems also take action when malicious activity or anomalous traffic is detected. Such actions include blocking traffic sent from suspicious Internet Protocol addresses.
An IDS can be contrasted with an intrusion prevention system (IPS), which also monitors network packets for potentially damaging network traffic, much like an IDS. However, an IPS has the primary goal of preventing threats once detected instead of primarily detecting and recording threats.