Author Question: Signature-based approaches attempt to define normal, or expected, behavior, whereas anomaly ... (Read 100 times)

lunatika · **on:** Jul 7, 2018

Signature-based approaches attempt to define normal, or expected, behavior, whereas anomaly approaches attempt to define proper behavior.

Indicate whether the statement is true or false.

Question 2

Intrusion detection is based on the assumption that the behavior of the intruder differs from that of a legitimate user in ways that can be quantified.

Indicate whether the statement is true or false.