Definition
An Intrusion Detection System (IDS) is a security mechanism that monitors network traffic or system activity to detect events that may indicate a security breach.
Human Explanation
An IDS observes activity in a network or system and reports suspicious behaviour that may indicate an attempted attack.
Why it Matters
Early detection enables a faster response and can limit the consequences of an Incident.
Conceptual Boundary
An IDS detects and reports Threats but does not itself block traffic or stop an attack.
Practical Perspective
IDS effectiveness depends on the quality of detection rules and appropriate analysis of generated alerts.