What is a difference between signature-based and behavior-based detection?

Question

Jim Apple · Accepted Answer

Behavior-based identifies behaviors that may be linked to attacks, while signature-based has a predefined set of rules to match before an alert.

Jim Apple · Answer

Signature-based identifies behaviors that may be linked to attacks, while behavior-based has a predefined set of rules to match before an alert.

Jim Apple · Answer

Behavior-based uses a known vulnerability database, while signature-based intelligently summarizes existing data.

Jim Apple · Answer

Signature-based uses a known vulnerability database, while behavior-based intelligently summarizes existing data.

List of questions