Subject review: Intrusion Detection System (IDS) and Intrusion Prevention System (IPS)

Intrusion detection system (IDS) is the process of monitoring events occurring in a computer or network and analyzing them for signs possible incidents, which are violations imminent threats violation security policies. An intrusion prevention (IPS) software that has all capabilities an can also attempt to stop incidents. If anomaly traffic pass through IDS would generate false positive means it only detects malicious traffic, takes no action generates alerts but IPS suspicious activity, actions like terminate, block drop connections. This paper provides explanation intrusion, detection, overcome them.