A. between security gateways

B. Between the host and the security gateway

C. between host and server

D. between host and host

A. After the application layer receives the data packet, the application layer information is stripped after parsing, and the final displayed user data is exactly the same as the data sent by the sender host

B. transport layer (TCP) after receiving the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such asUDP

C. The data packet is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as:IP

D. After the network layer receives the data packet, the network layer information is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such as HTTP

A. Once the intrusion detection system finds any behavior that violates the security policy or the system has traces of being attacked, it can implement blocking operations

B. The intrusion detection system can dynamically collect a large amount of key information through the network and computer, and can analyze and judge the current state of the entire system environment in time

C. The immersion detection system can be linked with firewalls and switches, becoming a powerful "assistant" of the firewall, and better and more precise control of traffic access between domains

D. Intrusion detection system includes all software and hardware systems used for intrusion detection