Exam SSCP topic 3 question 16 discussion

A. signature-based IDS Attributes that characterize an attack are typically stored for reference in a signature-based Intrusion Detection System (IDS). In signature-based IDS, known attack patterns or signatures are stored in a database, and the IDS compares incoming network traffic or system activity against these signatures. If there is a match between the observed activity and a stored signature, the IDS raises an alert or takes action to mitigate the threat. Signature-based IDS is effective at detecting known and well-defined attacks but may struggle with detecting new or previously unseen attacks