Problem
1. Describe the differences between a host-based IDS and a network-based IDS. How can their advantages be combined into a single system?
2. What are three benefits that can be provided by an IDS?
3. What is the difference between a false positive and a false negative in the context of an IDS?