Question

6. What is the purpose of a baseline as it relates to threat identification? What can you do if there isn’t a known pattern to use in threat identification?

Answer 1

In a threat identification system we first establish a baseline against the anomalies

The baselne must be changed in accordance to behavioural changes over time

The baseline will be a normal behaviour of the data

If there any abnormal behaviour happens, then the baseline is breached

hence the threat is identified

The patterns are a base or key feature for the treat detection

The question arises when there is no known pattern to use in threat identification

Obviously there is another method to use the water marking methods

watermark is base

where there is any change happens in the system watermark changes hence threat is identified

HOPE THIS HELPS

FEEL FREE TO COMMENT

THANKS