Traditional security often focuses on what happened.
CIDS focuses on how the behavior develops over time.
A single request may look harmless. But when multiple actions form an unusual pattern, the context can tell a very different story.
That is the problem I’m trying to solve with CIDS.
Observe the behavior. Understand the context. Then act.
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (0)