- Network intrusion detection systems (NIDS): A network intrusion detection system will track traffic using a variety of sensors that are installed on the network via either hardware or software. The system will then keep an eye on all activity passing via the various sensor sites and gadgets.
- Host intrusion detection systems (HIDS): In order to monitor traffic, a HIDS is installed directly on devices, providing network managers a little more freedom and control. Nevertheless, depending on the size of the business, this can become burdensome. If an organisation exclusively uses HIDS, it would have to keep track of every new device installed inside, which would be time-consuming and provide possibility for error.
- Protocol-based intrusion detection systems (PIDS): Frequently installed in front of a server, a protocol-based IDS keeps track of traffic going to and coming from devices. This is used to protect people while they browse the internet.
- Application protocol-based intrusion detection systems (APIDS): A protocol-based system and an APIDS are similar in that they both track server traffic. This is frequently used with particular application protocols to monitor activity precisely, assisting network managers in better segmenting and categorising their network monitoring activities.
- Hybrid intrusion detection systems: Combining the aforementioned kinds of intrusion detection is offered by hybrid IDS solutions. With order to cover numerous systems in one interface, some providers' products overlap multiple IDS categories.
