Monitoring Dynamic Behavior
At a basic level an APIDS would look for, and enforce, the correct (legal) use of the protocol.
However at a more advanced level the APIDS can learn, be taught or even reduce what is often an infinite protocol set, to an acceptable understanding of the subset of that application protocol that is used by the application being monitored/protected.
Thus, an APIDS, correctly configured, will allow an application to be "fingerprinted", thus should that application be subverted or changed, so will the fingerprint change.
Read more about this topic: Application Protocol-based Intrusion Detection System
Famous quotes containing the words dynamic and/or behavior:
“Imagination is always the fabric of social life and the dynamic of history. The influence of real needs and compulsions, of real interests and materials, is indirect because the crowd is never conscious of it.”
—Simone Weil (1909–1943)
“There is a striking dichotomy between the behavior of many women in their lives at work and in their lives as mothers. Many of the same women who are battling stereotypes on the job, who are up against unspoken assumptions about the roles of men and women, seem to accept—and in their acceptance seem to reinforce—these roles at home with both their sons and their daughters.”
—Ellen Lewis (20th century)