(1) Software that detects attempts or successful attacks on monitored resources that are part of a network or host system.
(2) Software that notifies the user of attempts to hack into, disrupt, or deny service to the system.