Monitoring Dynamic Behavior
At a basic level an APIDS would look for, and enforce, the correct (legal) use of the protocol.
However at a more advanced level the APIDS can learn, be taught or even reduce what is often an infinite protocol set, to an acceptable understanding of the subset of that application protocol that is used by the application being monitored/protected.
Thus, an APIDS, correctly configured, will allow an application to be "fingerprinted", thus should that application be subverted or changed, so will the fingerprint change.
Read more about this topic: Application Protocol-based Intrusion Detection System
Famous quotes containing the words dynamic and/or behavior:
“Knowledge about life is one thing; effective occupation of a place in life, with its dynamic currents passing through your being, is another.”
—William James (1842–1910)
“Temperament is the natural, inborn style of behavior of each individual. It’s the how of behavior, not the why.... The question is not, “Why does he behave a certain way if he doesn’t get a cookie?” but rather, “When he doesn’t get a cookie, how does he express his displeasure...?” The environment—and your behavior as a parent—can influence temperament and interplay with it, but it is not the cause of temperamental characteristics.”
—Stanley Turecki (20th century)