Okuzeka
Software Engineering vocabulary · APIs, Networking and Security

Intrusion detection system

Meaning in software engineering, with examples

nounCommon term

In software engineering, intrusion detection system means: A tool that monitors network traffic or system activity for signs of attacks or policy violations and raises an alert when it finds them.

In Turkish: saldırı tespit sistemi, IDS

How it is used

Usually called an IDS. An IDS only detects and alerts, while an intrusion prevention system (IPS) can also block traffic. Teams tune IDS rules to reduce false positives. Snort and Suricata are well-known open-source examples.

Example sentences

  1. The intrusion detection system raised an alert for unusual traffic from a printer.

  2. We placed the intrusion detection system between the DMZ and the internal network.

Common collocations

  • network-based IDS
  • host-based IDS
  • IDS rule
  • IDS/IPS
  • tune the IDS
  • firewallA hardware device or piece of software that checks network traffic and allows or blocks it according to a set of security rules.
  • alertAn automatic notification sent to engineers when a monitored value crosses a limit or something looks wrong, for example when the error rate is too high.
  • false positiveAn alert or test result that wrongly reports a threat or vulnerability when nothing harmful is actually there.
  • SIEMSecurity information and event management: a platform that collects logs from many systems, correlates them and raises alerts about possible attacks.

This word in other fields

The same English word can have a different meaning in another field:

More terms: APIs, Networking and Security

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: