|
This section describes what a signature
is; how they are implemented and structured; their different classes,
types, series, and categories; and their severities.
A signature is a set of rules pertaining to typical intrusion activity, which is compared against the network traffic. When this set of rules is matched to network activity, a unique response is generated for the event.
|