NIDS | Network Intrusion Detection System | Redscan

Definition

What is NIDS?

A network-based intrusion detection system is designed to help organisations monitor their cloud, on-premise and hybrid environments for suspicious events that could indicate a compromise. This includes policy violations and port scanning, plus unknown source and destination traffic.

NIDS security technologies are ‘passive’ rather than ‘active’ in nature. This means that they are designed solely to alert on suspicious activity, and for this reason are often deployed alongside intrusion prevention systems (IPS) which are ‘active’.

For organisations looking to further increase threat visibility, NIDS systems are commonly used in conjunction with host-based intrusion detection systems (HIDS) and SIEM solutions, which aggregate and analyse security events from multiple sources.