__________ involves an attempt to define a set of rules or attack patterns that can be used to decide that a given behavior is that of an intruder.
A) Signature detection
B) Anomaly detection
C) Profile based detection
D) Threshold detection

Question

Quizplus · Accepted Answer

Signature detection involves creating a database of known attack patterns and comparing network or system behavior to the signatures in the database. This approach allows for quick identification of known threats but can be limited by its reliance on pre-existing signatures. Anomaly detection, profile-based detection, and threshold detection all have different approaches to identifying intrusions, but signature detection specifically involves the use of predefined attack patterns.

__________ Involves an Attempt to Define a Set of Rules