The process of intrusion detection includes monitoring and analyzing the network activity and data for potential vulnerabilities and attacks.
The active type of intrusion detection may terminate processes or redirect traffic upon detection of a possible intrusion.
The active IDS is known as an intrusion prevention system — IPS. It automatically blocks suspected attacks in progress without any intervention required by an operator.