Signature-based approaches attempt to define normal, or expected, ...

[lunatika]

Signature-based approaches attempt to define normal, or expected, behavior, whereas anomaly approaches attempt to define proper behavior.
 
  Indicate whether the statement is true or false.

Question 2

Intrusion detection is based on the assumption that the behavior of the intruder differs from that of a legitimate user in ways that can be quantified.
 
  Indicate whether the statement is true or false.

[aburgess]

Answer to Question 1

F

Answer to Question 2

T

[lunatika]

TYSM

[bitingbit]

Thanks for the timely response, appreciate it