A software application that monitors network traffic for signs of malicious activity or policy violations.