examines network traffic, watching to see if it matches certain patterns or preconfigured rules indicative of an attack
a part of a firewall that monitors attempts to log in to servers and analyzes those attempts for patterns that might indicate a cracker's attack is under way.
Prosecutors say Mzoudi was involved in the preparations for the attack until the final moment and that he was aware of and supported the attackers ' violent goals .