Part $2$: Signatures and Actions

Signatures fall into one of the following two categories: Atomic signatures and stateful signatures. Describe each. $(100200$ words each$)$

There are three types of signature triggers. Describe each. $(100200$ words each$)$

Part $3$: Network Traffic Signatures

Distinguish normal traffic signatures from abnormal traffic signatures. $($Minimum $300$ words total$)$

Part $4$: Detection and Prevention Capabilities

You want to deploy a wireless intrusion detection system. What tool would you use and why? $($Minimum $300$ words total$)$

Most intrusion detection and prevention systems support multiple detection capabilities. Distinguish each of the following: Thresholds, blacklists, whitelists, and alert settings. $($Minimum $300$ words total$)$