Q. Which of the following is an advantage of anomaly detection?

• Rules are easy to define
• Custom protocols can be easily analyzed
• The engine can scale as the rule set grows
• Malicious activity that falls within normal usage patterns is detected

Submit