IDS

Definition: An IDS (Intrusion Detection System) is a device or application used to monitor all network traffic and the user or administrator when there were attempts at unauthorized access. The two main methods of monitoring for anomalies and signature. Depending on the device or application, the IDS simply either warn the user or administrator, or it may be configured to block certain traffic or to automatically react in a certain way.

The signature-based detection is based on the comparison of traffic to a database of known attack signatures based included. The anomaly-based detection compares the current network traffic to a known output Wellness for something unusual. IDS can strategically in the network as NIDS (intrusion detection, network-based), check all network traffic and can be installed on each system as a HIDS (Intrusion Detection in the host) are placed so that the traffic control to and from the specific apparatus.

Also known as: Intrusion Detection System, HIDS (Host Intrusion Detection System), NIDS (Network Intrusion Detection System)