The host intrusion detection system HIDS includes the following functions:

1. Asset inventory: structure asset information through host discovery, host inventory and application inventory, and provide the ability to associate with risk identification and intrusion detection and visual query interface
2. Risk identification: identify security risks in advance, accurately identify weak passwords, system vulnerabilities, application vulnerabilities and non-compliance security baselines, provide guidance for security reinforcement and reduce threats
3. Intrusion detection: multi anchor real-time monitoring of abnormal login, suspicious account, abnormal process, virus trojan, tampering of sensitive files and other intrusion behaviors, and sending alarm information at the first time
4. Real time defense: occupy a small amount of resources, provide violent cracking protection and malicious code protection functions, and provide appropriate security defense capabilities for the system
5. Security response: provide manual security service access for emergency response, so that security operators can quickly obtain snapshot information of core assets and assist in the disposal of intrusion events
6. Attack traceability: intelligently analyze massive security logs, provide log retrieval and visual clues, and help users locate the source of attack and the cause of intrusion"