caption: 29 Behaviour-based IDS IDS does not need to know about security vulnerabilities in a particular system the base-line defines normality; don't need to know the details of the construction of a buffer overflow packet.
exif: {}