HIPS

A HIPS is endpoint agent software that actively blocks malicious behavior on the host, such as suspicious process injection, memory tampering, or unauthorized changes to system files. Unlike a HIDS, which only alerts, a HIPS can terminate the offending action in real time, making it a last line of defense when network controls miss an attack. Its logic now usually lives inside modern EDR and endpoint protection suites rather than as a standalone product.