Intrusion detection systems can also be system-specific using custom tools and honeypots.
Signature-based IDS refers to the detection of attacks by looking for specific patterns, such as byte sequences in network traffic, or known malicious instruction sequences used by malware.