I'm a little bit confused about what a host-based intrusion prevention system is.
In order to better understand this concept, I'd like to introduce you a case.
Let's say someone designed the following software:
- The software must be installed on a host.
- The software is designed to protect a single host.
- The software checks network packets sent to the host against a set of signatures.
Could this software be called a host-based intrusion prevention system?
If not can you tell me why?