Intrusion detection is the practice of monitoring network traffic or system activities for malicious activity or policy violations. Intrusion Detection Systems (IDS) analyze traffic patterns and generate alerts when suspicious behavior is detected. Types include network-based (NIDS), host-based (HIDS), and hybrid systems. Detection methods include signature-based (matching known attack patterns) and anomaly-based (identifying deviations from baseline). IDS works alongside firewalls and SIEM systems as part of comprehensive network defense.
Networking