a. Distinguish between firewalls and IDSs. b. Why are IDS alarms often a problem? c. What is a false positive? d. What two types of filtering do IDSs use? e. Why is deep packet inspection important?...

a. Distinguish between firewalls and IDSs. b. Why are IDS alarms often a problem? c. What is a false positive? d. What two types of filtering do IDSs use? e. Why is deep packet inspection important? f. Why is deep packet inspection processing-intensive? g. Why is packet stream analysis important? h. Why does packet stream analysis place a heavy load on IDSs?