Which of the following are the major categories of IDSs response options?
A.
Active responses
B.
Passive responses
C.
Hybrid
D.
All of the choices.
Explanation:
Once IDSs have obtained event information and analyzed it to find symptoms of attacks, they
generate responses. Some of these responses involve reporting results and findings to a prespecified location. Others involve more active automated responses. Though researchers are
tempted to underrate the importance of good response functions in IDSs, they are actually very
important. Commercial IDSs support a wide range of response options, often categorized as active
responses, passive responses, or some mixture of the two.