An IDS monitors network or system activity for suspicious behavior or known attack patterns.
Why it matters:
- Alerts administrators to potential security breaches or policy violations.
- Helps detect attacks in progress, such as malware or network scanning.
- Often paired with firewalls for layered protection.
Pro tip: Use an IDS in combination with an Intrusion Prevention System (IPS) to not just detect, but actively block threats.
« Back to Glossary Index