The difference between misuse and anomaly IDS models is
A)Misuse models require knowledge of normal activity,whereas anomaly models don't.
B)Anomaly models require knowledge of normal activity,whereas misuse models don't.
C)Anomaly models are based on patterns of suspicious activity.
D)Anomaly model-based systems suffer from many false negatives.

Question

Quizplus · Accepted Answer

The Answer is B

The Difference Between Misuse and Anomaly IDS Models Is