a) Distinguish between signature detection and anomaly detection.
b) What is a zero-day attack?
c) Why are zero-day attacks impossible to stop with attack signatures?
d) What is the promise of anomaly detection?
e) Why is anomaly detection becoming critical for firewalls?