Definition
Intrusion Detection/Prevention Systems (IDS/IPS) are systems that continuously monitor network traffic and system events to detect anomalies or potential attacks:
- IDS analyses event and warns the administrator about suspicious activity
- IPS can automatically take measures to block or prevent an attack