What is Intrusion detection system (IDS)?
In short
An intrusion detection system (IDS) monitors network traffic or computer activity for signs of attacks or policy violations and alerts security staff.
Key takeaways
- It is detective: it alerts but doesn't block.
- An intrusion prevention system sits in the traffic path and can block threats automatically.
- Alerts need prompt review to be useful.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
What is the key difference between an intrusion detection system and an intrusion prevention system?