SSCP: Systems Security Certified Practitioner

A network-based IDS passively monitors packet headers and traffic on a network segment, enabling real-time intrusion detection without installing monitoring software on each protected host or placing itself inline to consume the production network path. Host-based and application-based IDSs rely on host or application telemetry, while firewall-based detection is coupled to a network enforcement device.