Using a process known as ____,Network IDSs must look for attack patterns by comparing measured activity to known signatures in their knowledge base to determine whether or not an attack has occurred or may be underway.
A)clipping
B)cache poisoning
C)scanning
D)signature matching

Question

Quizplus · Accepted Answer

The process described in the question, where Network IDSs compare measured activity to known signatures in their knowledge base to determine whether or not an attack has occurred or may be underway, is called signature matching. Option A, clipping, is not a term commonly associated with IDS. Option B, cache poisoning, refers to a specific type of attack and is not the name of a process for detecting attacks. Option C, scanning, refers to the process of systematically examining a network or system for vulnerabilities or weaknesses and is not specific to the identification of attacks.

Using a Process Known as ____,Network IDSs Must Look for Attack