Which of the following is a proper match for the type of IDS and the type ofattack it is best suited to uncover?