Definition
An Intrusion Prevention System (IPS) is a security mechanism that analyses network traffic in real time and automatically blocks activity identified as a Threat.
Human Explanation
An IPS not only detects suspicious activity but can also interrupt an attempted attack immediately.
Why it Matters
Automated response can limit an Incident before protected Assets are compromised.
Conceptual Boundary
An IPS does not replace a Firewall or other security mechanisms. It is one element of layered protection.
Practical Perspective
A poorly configured IPS may also block legitimate traffic and therefore requires regular tuning.