Since no one else took a shot. I'll see what I can do.
Establish a snapshot of what normal looks like. This can then be used at a later date to make a judgement around what has changed.
As the name implies, it means to continually montor a system looking for abnormal behavior. This may some times be refered to as real time monitoring
This is my taken from SANS auditing standards, not specific to wireless envirnments
CISSP, PMP, CWNA and CWSP