Which of the following are more difficult to detect today because programmers develop them to make legitimate calls on outbound ports that an IDS or firewall wouldn't detect?

Trojan programs

man$-$in$-$the$-$middle attacks

spyware

buffer overflows