Question

What are content- and context-based signatures?

Answer 1

The two main types of IDS signatures are context-based and content-based. Context-based signatures examine traffic and how that traffic fits into the other traffic around it. Example: Port Scanner. A content-based signature looks at what is inside the traffic, such as the contents of a specific packet.