Monitoring and Analysis
摘要
This book chapter discusses the concept of intrusion detection systems and explores different forms, such as network-based and host-based systems. This chapter also discusses different detection and analysis strategies that rely on signature, anomaly, and hybrid modes. Finally, it covers the topics of white listing and black listing in the detection system.