Expert systems are used to automate security log review for what purpose?
A.
To develop intrusion prevention
B.
To ensure best access methods
C.
To detect intrusion
D.
To provide statistics that will not be used for baselines
Explanation:
C: An IDS can be based on an expert system or have an expert system component. The job of the expert system is to identify patterns that would represent an intrusion or an attack that an IDS without this component may not pick up on. The expert system will look at a history of events and identify a pattern that would be otherwise very hard to uncover.
An IDS can be based on an expert system or have an expert system component. The job of the expert system is to identify patterns that would represent an intrusion or an attack that an IDS without this component may not pick up on. The expert system will look at a history of events and identify a pattern that would be otherwise very hard to uncover.
0
0