An IDS that looks for specific sequences of bytes is a
A) Firewall
B) Signature-based IDS
C) Anomaly-based IDS
D) Protocol-state IDS

Question

Quizplus · Accepted Answer

A signature-based IDS, also known as a knowledge-based IDS, works by analyzing incoming network traffic and comparing it to a pre-existing database of known attack patterns or signatures. This type of IDS scans for specific byte sequences or signatures that are associated with known threats, and alerts the administrator when a match is found.

An IDS That Looks for Specific Sequences of Bytes Is