Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-94

Guide to Intrusion Detection and Prevention Systems (IDPS)

Date Published: February 2007

Supersedes: SP 800-31 (11/01/2001)

Planning Note (07/15/2022):

In 2012, NIST released Draft SP 800-94 Revision 1 for public comment. That draft never became a final publication and has been retired.  

The inputs and comments on the retired draft were no longer applicable to the relevant technologies or threat models. NIST will announce when it initiates work to provide new guidance for IDS/IPS. You can subscribe to NIST's GovDelivery email alerts to be notified when NIST publications are published as final or posted as drafts for public comment.


Karen Scarfone (NIST), Peter Mell (NIST)



FISMA; intrusion detection; intrusion detection and prevention; intrusion prevention
Control Families

Audit and Accountability; Incident Response; Planning