Intrusion Detection Prevention (IDS)

An Intrusion Detection Prevention (IDS) is either a hardware device or software application that uses known intrusion signatures to detect and analyze both inbound and outbound network traffic for abnormal activities. This is done through:

  • System file comparisons against malware signatures.
  • Scanning processes that detect signs of harmful patterns.
  • Monitoring user behavior to detect malicious intent.
  • Monitoring system settings and configurations.[1]
  1. Definition - What is Intrusion Detection Prevention (IDS)? Imperva