the two basic approaches to ids are to attempt to define and detect _________________ behavior and to attempt to define and detect _______________ activity.