Answer:
Anomaly-based IDS
Explanation:
An anomaly-based intrusion detection system (IDS) can recognize and respond to some unknownattacks. Signature recognition, also referred to as pattern matching or dictionary recognition, looksfor patterns in network traffic and compares them to known attack patterns called signatures.Signature-based recognition cannot detect unknown attacks; they can only detect attacks identifiedby published signature files.Anti-virus software is a form of signature-based IDS. A network-based firewall filters packets for anetwork, while a host-based firewall filters packets for a host. Firewalls are typically configured usingaccess control lists that identify specific traffic that is allowed or denied.