Glossary: Hardening, Firewalls and Intrusion Detection

Signature-based detection

Detection that compares activity with a list of known attack patterns. It gives few false positives when well tuned but misses attacks with no signature.