answersLogoWhite

0


Want this question answered?

Be notified when an answer is posted

Add your answer:

Earn +20 pts
Q: What is anamoly based intrusion detection system?
Write your answer...
Submit
Still have questions?
magnify glass
imp
Related questions

What is web based intrusion detection system?

There is nothing.


What is a Web based Intrusion Detection System?

There is nothing.


Computer-based devices that examine each packet they detect are called?

Usually clumped together as firewalls. Devices like them are IPS - Intrusion protection system. IDS - Intrusion detection system.


What metrics are useful for profit-based intrusion detection?

counter, gauge, interval timer, resource use.


What is advantages of intrusion detection system?

Basically, instrusion detection -- either software installed on a computer or server or software built into a security appliance -- is for detecting and notifying you of any unuathorized attempt to gain access to your computer or network. There are several different schemes for intrustion detection, all based on some sort of user or machine authentication.


What Antivirus software installed to scan and monitor malware activities on a server or workstation would be identified as?

host based intrusion detection


Antivirus software installed to scan and monitor malware activities on a server or workstation would be identified as?

host based intrusion detection


What does HIPS stand for on computers?

host-based intrusion prevention system


Which Symantec endpoint protection engine is used to scan files folders and memory locations for different types of malware is an example of which based intrusion detectionprevention software?

This would be a host based intrusion detection and prevention software. It helps to keep your computer safe from potential threats.


Megan is considering the implementation of PEDs in their shipping and supply area. She should review Army Regulation?

Antivirus software installed to scan and monitor malware activities on a server or workstation would be identified as a __________ based intrusion detection/prevention system.


Antivirus software installed to scan and monitor malware?

host based intrusion detection


What is the difference between misuse intrusion detection and anomaly intrusion detection?

Misuse IDS trying to detect abnormal behavior by analyzing the given traffic and matching several rules. based on Analysis and comparison with the Rules the system can detect any attacks, such as matching signature pattern. this method is still not sufficient. Anomaly IDS trying to detect anomalies when any deviation occur from the normal system. That means, using Data mining techniques such as Machine Learning, this techniques will study the system and build a profile to it, and then using certain classification algorithms it will monitor the traffic, any traffic that deviate from the original profile will be an anomaly. there are several methods applied in Anomaly IDS such as Clustering, Neural Network, Fuzzy logic and etc.... Summary: Misuse is limited but Anomaly is adaptive and can detect even early attacks. I hope that help answering your question. Regards