home/glossary/Intrusion detection

Intrusion detection

nounverified·updated May 9, 2026

Techniques that attempt to detect unauthorized entry or access into a computer or network by observation of actions, security logs, or audit data; detection of break-ins or attempts, either manually or via software expert systems that operate on logs or other information available on the network.

MWEFederal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary

Senses

SANS Glossary of Security Terms

A security management system for computers and networks. An IDS gathers and analyzes information from various areas within a computer or a network to identify possible security breaches, which include both intrusions (attacks from outside the organization) and misuse (attacks from within the organization).

National Initiative for Cybersecurity Careers and Studies (NICCS) Cybersecurity Lexicon

The process and methods for analyzing information from networks and information systems to determine if a security breach or security violation has occurred.

ISACA Cybersecurity Glossary

The process of monitoring the events occurring in a computer system or network to detect signs of unauthorized access or attack

NIST SP 800-171r3attested usage pack match

No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.

Classifications

Entity Type

Capability92%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Sensitivity

unclassified

Information Class

unclassified

Variants

plural
Intrusion detections
possessive
Intrusion detection's
pluralpossessive
Intrusion detections'