The intrusion detection system is a program designed for the detection and identification of malicious activity on a host or malicious activities within a computer network. Network-based intrusion detection systems check for live data, and host-based intrusion detection systems examine the log files on the system.
Types Of Intrusion Detection Systems:
1. Host Intrusion Detection Systems (HIDS)
2. Network Intrusion Detection Systems (NIDS)
Both Network-based intrusion detection systems and host-based intrusion detection systems examine system records and activities. In Host-Based Intrusion Detection systems, most auditors usually look at logs, event records, and records in files. However, Network-based intrusion detection systems search for and examine packet data communicated within a network.
Conclusion:
Both HIDS and NIDS implementation are necessary for a network. It is advisable to implement HIDS before NIDS because each and every computer must be examined before moving further on examining the network in which computers are connected.