This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources: "Intrusion detection system" – news · newspapers · books · scholar · JSTOR(September 2018) (Learn how and when to remove this message)
An intrusion detection system (IDS; also intrusion prevention system or IPS) is a device or software application that monitors a network or systems for malicious activity or policy violations.[1] Any intrusion activity or violation is typically either reported to an administrator or collected centrally using a security information and event management (SIEM) system. A SIEM system combines outputs from multiple sources and uses alarm filtering techniques to distinguish malicious activity from false alarms.[2]
IDS types range in scope from single computers to large networks.[3] The most common classifications are network intrusion detection systems (NIDS) and host-based intrusion detection systems (HIDS). A system that monitors important operating system files is an example of an HIDS, while a system that analyzes incoming network traffic is an example of an NIDS. It is also possible to classify IDS by detection approach. The most well-known variants are signature-based detection (recognizing bad patterns, such as malware) and anomaly-based detection (detecting deviations from a model of "good" traffic, which often relies on machine learning). Another common variant is reputation-based detection (recognizing the potential threat according to the reputation scores). Some IDS products have the ability to respond to detected intrusions. Systems with response capabilities are typically referred to as an intrusion prevention system.[4] Intrusion detection systems can also serve specific purposes by augmenting them with custom tools, such as using a honeypot to attract and characterize malicious traffic.[5]
^"What is an Intrusion Detection System (IDS)?". Check Point Software Technologies. 2023. Retrieved 27 December 2023.
^Martellini, Maurizio; Malizia, Andrea (2017-10-30). Cyber and Chemical, Biological, Radiological, Nuclear, Explosives Challenges: Threats and Counter Efforts. Springer. ISBN 9783319621081.
^Axelsson, S (2000). "Intrusion Detection Systems: A Survey and Taxonomy" (retrieved 21 May 2018)
^Newman, R.C. (23 June 2009). Computer Security: Protecting Digital Resources. Jones & Bartlett Learning. ISBN 978-0-7637-5994-0. Retrieved 27 December 2023.
^Mohammed, Mohssen; Rehman, Habib-ur (2015-12-02). Honeypots and Routers: Collecting Internet Attacks. CRC Press. ISBN 9781498702201.
and 19 Related for: Intrusion detection system information
An intrusiondetectionsystem (IDS; also intrusion prevention system or IPS) is a device or software application that monitors a network or systems for...
automate wireless scanning for large organizations. A wireless intrusiondetectionsystem (WIDS) monitors the radio spectrum for the presence of unauthorized...
Intrusiondetectionsystem evasion techniques are modifications made to attacks in order to prevent detection by an intrusiondetectionsystem (IDS). Almost...
A perimeter intrusiondetectionsystem (PIDS) is a device or sensor that detects the presence of an intruder attempting to breach the physical perimeter...
The Advanced IntrusionDetection Environment (AIDE) was initially developed as a free replacement for Tripwire licensed under the terms of the GNU General...
applications in cyber-security, intrusiondetection, fraud detection, fault detection, system health monitoring, event detection in sensor networks, detecting...
(IntrusionDetection Message Exchange Format) is a data format used to exchange information between software enabling intrusiondetection, intrusion prevention...
In computer security, the Linux IntrusionDetectionSystem (LIDS) was a patch to the Linux kernel and associated administrative tools that enhanced the...
A security alarm is a system designed to detect intrusions, such as unauthorized entry, into a building or other areas, such as a home or school. Security...
network security appliances were based on Snort, an open-source intrusiondetectionsystem (IDS). Sourcefire was acquired by Cisco for $2.7 billion in July...
sharing on its systems. In addition to software, people, devices, and websites can also be whitelisted or blacklisted. Intrusiondetectionsystems are designed...
Ensemble learning systems have shown a proper efficacy in this area. An intrusiondetectionsystem monitors computer network or computer systems to identify...
tunnelling them in (D)TLS, allow inspection of encrypted traffic by an intrusiondetectionsystem to detect and block malicious activities, allow network surveillance...
Information and Decision Systems, an interdisciplinary research laboratory of MIT, Cambridge, Massachusetts Linux IntrusionDetectionSystem, a patch to the Linux...
HIDS may refer to: Host-based intrusiondetectionsystem, in computing Hyper-IgD syndrome, in medicine HID (disambiguation) This disambiguation page lists...
interdependent systems that can include CCTV surveillance, security guards, protective barriers, locks, access control, perimeter intrusiondetection, deterrent...
it as an intrusion-detectionsystem (IDS), as it proactively works to find suspicious activity within a computer network, alerting the system administrator...
Global Information