Intrusion Detection System Types

Question 1

Behavior Based IDS

Answer 1

Looks for behavior that isn’t allowed and acts accordingly.

Question 2

Anomaly Based IDS

Answer 2

Detects behaviors that are unusual.

Once a baseline is established, then this IDS can detect anomalies.

Question 3

Network Based IDS

Answer 3

Monitors all network traffic. Implements active and passive responses.

Question 4

Signature Based IDS

Answer 4

Relies on a database that contains the ID or signature of possible attacks. The signature database has to stay up to date in order for it to be effective.