Security Glossary

An intrusion detection system is a security solution that continuously monitors systems or networks to detect and alert on suspicious or malicious activity. IDS provides visibility into threats, helping organisations respond quickly and strengthen defences. It analyses traffic, logs, and behaviour using signature-based and anomaly-based detection techniques to identify threats. There are two types of intrusion detection:

• Network-based (NIDS): It monitors entire subnets.
• Host-based (HIDS): It monitors individual devices.

In mobile app environments, IDS solutions monitor backend systems, APIs and network interactions to detect attacks targeting mobile applications and users.

An integrator tool is a software component that integrates or joins third-party services, security solutions or modules into an application or system. It connects different systems, SDKs or APIs, enabling them to work together efficiently. It manages configuration, communication and data exchange between integrated components. It helps in the proper integration of security solutions so that they function correctly without introducing vulnerabilities or misconfigurations that attackers can exploit. In mobile apps, the main integrator tools are API-based integrators, SaaS connectors and CI/CD tools. They also help in integrating security solutions like RASP, threat monitoring and analytics without disrupting app functionality.

Intrusion detection is the process of identifying malicious actions, policy violations, and anomalies. It is like a security camera, analysing data to alert administrators of potential threats before damage occurs. It monitors system behaviour, logs, and network traffic to identify anomalies or known attack patterns, triggering alerts when threats are detected. In mobile ecosystems, intrusion detection identifies abnormal app behaviour, unauthorised access attempts, or malicious activities, supporting timely response to potential threats. There are two methods of intrusion detection:

• Signature-based intrusion detection: It identifies known threats via unique signatures.
• Anomaly-based intrusion detection: It models normal behaviour to detect deviations.

Incident response is a structured process organisations use to detect, manage, and recover from cyber incidents such as data breaches, malware infections, or account-takeover attacks. It typically includes preparation, identification, containment, eradication, recovery, and post-incident review. In mobile app environments, incidents may involve data leaks or exploitation of security gaps. A well-defined response plan outlines clear roles, communication steps, and technical actions to limit impact. Acting quickly helps reduce damage, minimise downtime, and protect sensitive data. Continuous monitoring and regular testing strengthen response readiness and ensure organisations stay prepared for evolving threats and compliance requirements.

Information security, abbreviated as InfoSec, is a practice of protecting data from alteration, unauthorised access and unintended destruction. This includes protection of personal, financial and sensitive information both in digital and physical form. In mobile app security, InfoSec is an important concept and is used for protecting intellectual property, mitigating cyber threats, complying with security standards and protecting business reputation. Information security works on three principles: Confidentiality, Integrity and Availability. Strong information security practices help organisations protect the confidentiality, integrity, and availability of their data. Good security measures not only reduce the risk of cyber threats but also help businesses meet regulatory requirements and build trust with their users.

Identity and Access Management (IAM) is a security framework of policies and technologies that helps to provide the right resources to authorised users at the right time. This framework manages digital identities and controls access to systems and resources. IAM supports secure authentication and authorisation, and provides appropriate permissions based on their roles and responsibilities. Organisations need IAM for secure data management and access control. It gives access based on the digital identity of people, such as designation, role, etc. Access and permissions are provided only to authorised persons. This helps maintain security and avoid data theft.