SecuraCorp needs an Intrusion Detection System (IDS) that can identify suspicious patterns based on

behavior rather than relying solely on known signatures. Here’s why an Anomaly-based IDS is the

best fit:

Anomaly-based IDS:

Behavior Analysis: Detects deviations from normal network behavior, which is crucial for identifying

zero-day vulnerabilities.

Pattern Recognition: Uses machine learning and statistical methods to identify unusual patterns that

might indicate malicious activity.

Advantages: Effective against unknown threats and zero-day exploits because it does not rely on

predefined signatures.

Network-based IDS: Primarily monitors network traffic but often relies on signatures, making it less

effective against unknown threats.

Signature-based IDS: Relies on a database of known attack signatures, which is not sufficient for

detecting new or unknown threats.

Host-based IDS: Monitors individual systems but might not provide a comprehensive view of the

network.

Reference:

EC-Council Certified Security Analyst (ECSA) materials.