Protocol-based intrusion detection system: Difference between revisions

Content deleted Content added
Line 12:
 
=== Monitoring dynamic behavior ===
AsAt a basic level PIDS would look for, and enforce, the correct (legal) use of the protocol.
 
At a more advanced level the PIDS can learn or be taught acceptable constricts of the protocol, and thus better detect anomalous behaviour.