Joe, the Chief Technical Officer (CTO), is concerned about new malware being introduced into the corporate network. He has tasked the security engineers to implement a technology that is capable of…

An Application Firewall controls access based on application-layer rules but does not detect or alert on unusual traffic patterns.

Anomaly-based IDS learns and profiles normal network traffic patterns and then generates alerts when observed traffic deviates significantly from that baseline. This approach is specifically designed to detect novel threats and unusual behavior that may indicate new malware, unlike signature-based systems that require known patterns.

A Proxy Firewall mediates connections and filters content but is not designed to identify anomalous traffic indicating new malware.

A Signature-based IDS matches traffic against known attack signatures and cannot detect new or unknown malware with no existing signature.