mary wants to implement a type of intrusion detection system that can be matched to certain types of traffic patterns. what kind of ids does she need?