Which of the following software security devices can be implemented on individual servers in order to solely identify abnormal behavior?

Which of the following software security devices can be implemented on individual servers in order to solely identify abnormal behavior?

A.
HIPS

B.
HIDS

C.
Network-based firewall

D.
DNS