
Intrusion Detection is a system designed to monitor network traffic for any suspicious activities or known threats. If such anomalies are found, the system will provide information such as the type of suspected attack, the targeted address and where it came from. Intrusion detection systems can be categorized as host-based, if the sensors that detect the threat are placed on a host, or network-based, if the sensors are placed on a network.
How an IDS works
The main purpose of an IDS is to detect and report an anomaly, but not to block or stop it. This is in contrast to a firewall or...