Signature-based intrusion detection systems (IDS) a) Compare data packet and connection patterns against databases of known anomalies b) Look for deviations in (measured) average behaviors for key parameters c) Are very responsive to new and evolving threats d) Are located inside the network DMZ (non-secure) a) All of the above