TopicCybersecurity →
Simple definition
A system that detects suspicious network or system activities without necessarily blocking them.
Technical definition
Intrusion PORT System analyzes signatures, behaviours or anomalies and generates alerts when an activity is a risk.
What is it used for ?
Identify unusual attempts to intrude or behaviour.
Practical example
One IDS can alert when it detects a known operating signature on network traffic.
Common issues
- False positive
- Encrypted traffic hard to inspect
- Signatures not updated
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.