Intrusion detection

A security management system for computers and networks. An IDS gathers and analyzes information from various areas within a computer or a network to identify possible security breaches, which include both intrusions (attacks from outside the organization) and misuse (attacks from within the organization).

The process and methods for analyzing information from networks and information systems to determine if a security breach or security violation has occurred.

The process of monitoring the events occurring in a computer system or network to detect signs of unauthorized access or attack

Techniques that attempt to detect unauthorized entry or access into a computer or network by observation of actions, security logs, or audit data; detection of break-ins or attempts, either manually or via software expert systems that operate on logs or other information available on the network.