Intrusion detection systems can be further divided into two broad categories based on their placement: host-based IDSes and network-based IDSs.
- Host-based intrusion detection system (HIDS): This is a small, agent or sensor-based piece of software installed on single or multiple hosts on a network. It protects the individual host by monitoring and reporting the system configuration and by keeping track of application activity. A host IDS is passive in nature, provides functionality to gather information by identifying, logging, alerting, and reporting. You can always install a HIDS on different DMZ servers such as web servers, mail servers, database servers, or any server that you want to monitor or protect on the network. Any ...