The general term for a collection of hardware and software that determines whether activity is present that is contrary to organization policy and represents an intrusion; also, a system with the capability both to detect and modify its configuration and environment to prevent intrusions.