A ____ intrusion detection and prevention system is also known as a behavior-based intrusion detection system.
A) network-based
B) statistical anomaly-based
C) host-based
D) signature-based

Question

Quizplus · Accepted Answer

A statistical anomaly-based intrusion detection and prevention system analyzes the behavior of users and systems to detect abnormal patterns that indicate an intrusion. It is based on statistical models that define what is considered to be normal behavior and can detect previously unknown attacks. It differs from a signature-based intrusion detection and prevention system, which detects known attack patterns, and from a host-based system that monitors activity on a single computer or server. A network-based system monitors traffic on a network segment.

A ____ Intrusion Detection and Prevention System Is Also Known