The practice of monitoring networks for suspicious behavior in order to alert administrators of attacks, in the best case, of attacks-in-progress. Good intrusion detection systems are accurate, timely, and provide the possibility for intelligent response. _____________________________________________________________________________

A security service that monitors and analyzes system events to find and provide real-time or near real-time attempt warnings to access system resources in an unauthorized manner. This is the detection of break-ins or break-in attempts, by reviewing logs or other information available on a network.

techniques designed to detect breaches into a computer system or network

A service that monitors system events used to warn about unauthorized system access.

Intrusion detection (ID) is a type of security management system for computers and networks. An ID system gathers and analyzes information from various areas within a computer or a network to identify possible security breaches, which include both intrusions (attacks from outside the organization) and misuse (attacks from within the organization). ID uses vulnerability assessment (sometimes referred to as scanning), which is a technology developed to assess the security of a computer system or network.

Software, usually, or hardware that detects when a computer or system is being accessed. Typically used in monitoring and preventing external users from accessing networks or computers.

A security service that monitors and analyzes system events to identify security breaches to the network and provide real-time warnings when an unauthorized intrusion, or break-in, to the network is attempted. (See Rogue, War chalking, War driving). close

Techniques which try to detect intrusion or unauthorized entry into a computer or network by observation of actions, security logs or audit data. Intrusion detection is the discovery of break-ins or attempted break-ins either manually or via specific software systems that operate on logs or other information available on the network.

Detection of break-ins or break-in attempts either manually or via software expert systems that operate on logs or other information available on the network.

By monitoring the firewalls and other gateway routers that sit between an enterprise's internal network and the Internet, the service of intrusion detection can detect and respond to, in real time, attempts to hack into the enterprise network.

A security management system for computers and networks that tries to identify possible security breaches.

A security service that monitors and analyzes system events for the purpose of finding, and providing real-time or near real-time warning of, attempts to access system resources in an unauthorized manner.

Software that looks at who tries to break in and reports on these attempts.

Intrusion Detection is the process of monitoring events occurring on a computer system or network and analysing them for signs of intrusion.

Detection of system penetration or attempted penetration, via manual or software expert systems that observe actions, security logs, or audit data.

Software that utilizes special algorithms and rule sets to analyze and detect either attempted or actual break ins. A common use is to put a detector connected to the intrusion detection computer outside the firewall (on the Internet side) so as to detect and analyze the traffic there. Many attempted break ins are preceded by certain information gathering techniques (probes) that can be alerts to an impending attack.

In Information Security, intrusion detection is the act of detecting actions that attempt to compromise the confidentiality, integrity or availability of a resource. Intrusion detection does not, in general, include prevention of intrusions.