What are the drawbacks of signature based IDS?
(a) They are unable to detect novel attacks
(b) They suffer from false alarms
(c) They have to be programmed again for every new pattern to be detected
(d) All of the mentioned
I have been asked this question at a job interview.
My doubt stems from Security topic in division Security of Operating System