According to the different working modes of IPS, IPS can be divided into three categories: host-based intrusion prevention (HIPS), network-based intrusion prevention (NIPS) and application-based intrusion prevention (AIP).

The signature of ips includes predefined signature, custom signature and exception signature. Ips signature is mainly used to describe the characteristics of this intrusion in the network and the actions that devices need to take. Users can manage predefined signatures through signature filters, and then manage custom signatures and predefined signatures through abnormal signatures.