Please use APA style formatting.
Summarize the concept of hierarchical intrusion detection. What are the benefits of a hierarchical intrusion detection topology?
Definition-based and behavior-based detection both serve unique purposes. Review existing research and determine the benefits of both definition and behavior-based detection systems. Explain how these types of systems can complement each other and enhance an organization’s defense-in-depth strategy.
What is a false positive and a false negative for an IDS? Which one is more probable for a definition-based IDS solution? Which one is more probable for a behavior-based IDS solution? Why?