security
IDS
Intrusion Detection System
Definition
An IDS monitors network traffic or host activity for malicious patterns and generates alerts when suspicious activity is detected. Network IDS (NIDS) analyzes packets on the wire; host IDS (HIDS) monitors system logs, file changes, and process activity on individual machines.
Unlike IPS, an IDS only detects and alerts — it does not actively block traffic.
Can this ship? Are we exposed? Can you prove it?
Every CISO is asking these three questions. We answer them with facts, not guesses, from repository to runtime.