a. What is an IDS? b. Is an IDS a preventative, detective, or restorative control? c. What are false positives? d. Why are false positives problems for IDSs? a. What are the four functions of IDSs? b....

a. What is an IDS? b. Is an IDS a preventative, detective, or restorative control? c. What are false positives? d. Why are false positives problems for IDSs?

a. What are the four functions of IDSs? b. What are the two types of analysis that IDSs usually do? c. What types of action did this section mention? d. What information should alarms contain? e. What is the purpose of log summary reports? f. Describe interactive log file analysis.