What are the characteristics of signature based IDS?

• A. Most are based on simple pattern matching algorithms
• B. It is programmed to interpret a certain series of packets
• C. It models the normal usage of network as a noise characterization
• D. Anything distinct from the noise is assumed to be intrusion activity