intrusion detection parameter
163573·updated Sep 1, 2026This phrase is compositional rather than a term of art. "Intrusion detection" is a well-established field concept, and "parameter" is a generic technical word meaning a configurable value, threshold, or attribute; together they simply describe any measurable or configurable variable used within an intrusion detection context — such as a threshold, signature attribute, or detection rule value. In technical and patent usage, "intrusion parameters" refer to the set of criteria or values against which detected events are compared to determine whether an intrusion event has occurred, with those parameters defining which activity corresponds to which unusual or intrusion event. No authoritative standards body (NIST, ISO, AICPA, CIS) assigns this two-word phrase a specialized definition distinct from its component words.
Source
intrusion detectionthe sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: compositional.
- Intrusion detection and response system
- Draft SP 800-94 Rev. 1, Guide to Intrusion Detection and ...
- CIS Critical Security Controls Navigator - v8
- Selection of Effective Network Parameters in Attacks for Intrusion Detection | SpringerLink
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
This phrase is compositional rather than a term of art. "Parameter" retains its ordinary technical meaning (a configurable value, measurable feature, or boundary condition) and is simply modified by "intrusion detection" to indicate its domain of application; sources use it to describe values against which monitored events are compared to determine whether an intrusion event has occurred, where such parameters define which activity corresponds to unusual or intrusive behavior. Across patents and research literature the phrase shifts freely — referring variously to network features extracted from traffic datasets for detecting intrusions, to machine-learning weights acquired and updated by a detection system, and to configuration inputs such as maximum numbers of systems to install or cost ceilings. No authoritative standards body (NIST, ISO, AICPA, CIS, or any regulator) defines "intrusion detection parameter" as a standalone term with a fixed meaning distinguishable from its component words.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
Classifications
Entity Type
Sensitivity
Information Class
Variants
- plural
- intrusion detection parameters
- possessive
- intrusion detection parameter's
- pluralpossessive
- intrusion detection parameters'
Framework definitions
- §1 · attested_usage_reviewer_confirmed
- No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.Increment 2: attested in 800-171r3 without a glossary definition.
- §1 · web_lookup_draft
- This phrase is compositional rather than a term of art. "Intrusion detection" is a well-established field concept, and "parameter" is a generic technical word meaning a configurable value, threshold, or attribute; together they simply describe any measurable or configurable variable used within an intrusion detection context — such as a threshold, signature attribute, or detection rule value. In technical and patent usage, "intrusion parameters" refer to the set of criteria or values against which detected events are compared to determine whether an intrusion event has occurred, with those parameters defining which activity corresponds to which unusual or intrusion event. No authoritative standards body (NIST, ISO, AICPA, CIS) assigns this two-word phrase a specialized definition distinct from its component words.DR-088 backfill from the noun definition column