Question:
Intrusion
1. Describe the differences between the two main classes of intrusions: misuse and anomaly.
2. What are the characteristics of a good intrusion detection system?
3. Visit the distributed intrusion detection system called DShield at www.dshield.org.
4. Which types of attacks are more prevalent at the time of your visit to the site?
5. Where is the origin of most of the attacks?