PE’s

•PE = traps to catch the attack Traffic footprint – elements of the rule – S/A/R/CI

•Rule = combination  of PE to find and prevent a known footprint of attack

•Policy = Set of Rules – rule sets