The Difference Between Misuse and Anomaly IDS Models Is

Multiple Choice

The difference between misuse and anomaly IDS models is

A) Misuse models require knowledge of normal activity,whereas anomaly models don't.
B) Anomaly models require knowledge of normal activity,whereas misuse models don't.
C) Anomaly models are based on patterns of suspicious activity.
D) Anomaly model-based systems suffer from many false negatives.