So sánh phương pháp

	Hệ thống phát hiện xâm nhập	Đánh giá lỗ hổng bảo mật
Lĩnh vực	Mật mã học	Mật mã học
Họ	Process / pipeline	Process / pipeline
Năm ra đời	1987	2002
Người khởi xướng	Dorothy Denning	National Institute of Standards and Technology (NIST)
Loại	Security monitoring and anomaly detection	Vulnerability identification and prioritization
Công trình gốc	Denning, D. E. (1987). An intrusion-detection model. IEEE Transactions on Software Engineering, 13(2), 222–232.	National Institute of Standards and Technology (2012). Guide for Conducting Security Patch Management Activities. NIST Special Publication 800-40 Revision 3.
Tên gọi khác	IDS, Network Intrusion Detection, Anomaly Detection System	Vulnerability Scanning, Security Assessment, Risk Assessment
Liên quan	3	3
Tóm tắt	An Intrusion Detection System (IDS) is a security tool that monitors network traffic and system activity to identify unauthorized access attempts, malware infections, and policy violations. Introduced by Dorothy Denning in 1987, IDS employs two main detection paradigms: signature-based (matching known attack patterns) and anomaly-based (identifying deviations from normal behavior).	Vulnerability assessment is a systematic process of identifying, quantifying, and prioritizing security weaknesses in systems, networks, and applications. Using automated scanning tools and manual techniques, organizations discover unpatched software, misconfigurations, weak cryptographic practices, and other exposures that attackers could exploit.