Editing Intrusion detection system (section)

=== Classification ===
Intrusion prevention systems can be classified into four different types:{{r|GIDPS|Vacca2010}}

# '''Network-based intrusion prevention system (NIPS)''':  monitors the entire network for suspicious traffic by analyzing protocol activity.
# '''Wireless intrusion prevention system (WIPS)''': monitor a wireless network for suspicious traffic by analyzing wireless networking protocols.
# '''Network behavior analysis (NBA)''': examines network traffic to identify threats that generate unusual traffic flows, such as distributed denial of service (DDoS) attacks, certain forms of malware and policy violations.
# '''Host-based intrusion prevention system (HIPS)''': an installed software package which monitors a single host for suspicious activity by analyzing events occurring within that host.