device which monitors network activities for malicious attacks and produces reports to a management station
detects/prevents someone from breaking into your system running in background and notifies you when there is a possibility of intrusion
the term used to describe how hard it is to access network data &  accounts without authorisation