Watch this video on YouTube
Which of the following options represents a conceptual characteristic of an anomaly-based IDS over a signature-based IDS?