An IPS signature describes the characteristics of a network attack. A firewall detects and defends against attacks by comparing data flows with IPS signatures.