A Host-based Intrusion Detection System (IDS) is a device or software application used to monitor and analyze the internals of a computing system (host) for malicious activity or policy violations. Unlike routers, switches, or even firewalls, which focus on network traffic or connectivity, a host-based IDS operates on individual machines to detect unauthorized activity or changes.
[Reference: ISA/IEC 62443-3-3:2013, Section 4.2.3.6 (“Intrusion detection and prevention”); Glossary: “Intrusion Detection System (IDS).”, , ]
Submit