Bob finished a C programming course and created a small C application to monitor the network traffic and produce alerts when any origin sends "many" IP packets, based on the average number of packets sent by all origins and using some thresholds.
In concept, the solution developed by Bob is actually:
- A.Just a network monitoring tool
- B.A signature-based IDS
- C.A hybrid IDS
- D.A behavior-based IDS