← Security+ glossary

Intrusion detection system / intrusion prevention system (IDS/IPS) IDS/IPS

An IDS passively monitors traffic and only alerts on suspicious activity, while an IPS works inline and can actively block attacking traffic in real time. Detection can be signature-based, recognizing known attack patterns, or anomaly-based, noticing deviations from normal behavior.

All Security+ guides →