Real Life
Again, the Hybrid
- Systems that can use portions of each of these are more powerful and more effective.
- Detect known attacks, then use known attack rules to supplement profile-base monitoring to determine variants or new attacks.
- Very intensive on all fronts.