An intrusion detection system (IDS) inspects all inbound and outbound network activity and identifies suspicious patterns that may indicate a network or system attack from someone attempting to break into or compromise a system. There are several ways to categorize an IDS:
Civil inattention. Civil inattention is the process whereby strangers who are in close proximity demonstrate that they are aware of one another, without imposing on each other â a recognition of the claims of others to a public space, and of their own personal boundaries.
Incident Definition. An incident is the act of violating an explicit or implied security policy according to NIST Special Publication 800-61. Of course, this definition relies on the existence of a security policy that, while generally understood, varies among organizations.