CCSP: Certified Cloud Security Professional

A network-based IDS can be segregated from the systems it monitors, so compromising an endpoint does not inherently give an attacker control of the IDS sensor. NIST notes that network-based IDS sensors can be dedicated to IDS operation and more easily secured, while host-based IDS components reside on the attacked host and may be attacked or disabled.