What are characteristics of stack based IDS?
A. They are integrated closely with the TCP/IP stack and watch packets
B. The host operating system logs in the audit information
C. It is programmed to interpret a certain series of packets
D. It models the normal usage of network as a nosie characterization