Please use APA style formatting.

Question 1

Summarize the concept of hierarchical intrusion detection. What are the benefits of a hierarchical intrusion detection topology?

Question 2

Definition-based and behavior-based detection both serve unique purposes.  Review existing research and determine the benefits of both definition and behavior-based detection systems. Explain how these types of systems can complement each other and enhance an organization’s defense-in-depth strategy.

Question 3

What is a false positive and a false negative for an IDS?  Which one is more probable for a definition-based IDS solution? Which one is more probable for a behavior-based IDS solution? Why?