When comparing host based IDS with network based ID, which of the following is an obvious
advantage?
A.
It is unaffected by switched networks.
B.
It cannot analyze encrypted information.
C.
It is not costly to setup.
D.
It is not costly to manage.
Explanation:
Host-based IDSs are unaffected by switched networks. When Host-based IDSs operate on OS audit
trails, they can help detect Trojan horse or other attacks that involve software integrity breaches.
These appear as inconsistencies in process execution.