השוואת שיטות

	הערכת פגיעות	מערכת זיהוי חדירות
תחום	קריפטוגרפיה	קריפטוגרפיה
משפחה	Process / pipeline	Process / pipeline
שנת המקור	2002	1987
הוגה השיטה	National Institute of Standards and Technology (NIST)	Dorothy Denning
סוג	Vulnerability identification and prioritization	Security monitoring and anomaly detection
מקור מכונן	National Institute of Standards and Technology (2012). Guide for Conducting Security Patch Management Activities. NIST Special Publication 800-40 Revision 3.	Denning, D. E. (1987). An intrusion-detection model. IEEE Transactions on Software Engineering, 13(2), 222–232.
כינויים	Vulnerability Scanning, Security Assessment, Risk Assessment	IDS, Network Intrusion Detection, Anomaly Detection System
קשורות	3	3
תקציר	Vulnerability assessment is a systematic process of identifying, quantifying, and prioritizing security weaknesses in systems, networks, and applications. Using automated scanning tools and manual techniques, organizations discover unpatched software, misconfigurations, weak cryptographic practices, and other exposures that attackers could exploit.	An Intrusion Detection System (IDS) is a security tool that monitors network traffic and system activity to identify unauthorized access attempts, malware infections, and policy violations. Introduced by Dorothy Denning in 1987, IDS employs two main detection paradigms: signature-based (matching known attack patterns) and anomaly-based (identifying deviations from normal behavior).