The process of monitoring network traffic to detect and prevent unauthorized access and suspicious activities.