QuestionQ13

VerifiedDeployment and configuration

Refer to the exhibit.

Question Image

Question Image

After training the machine learning (ML) anomaly-detection system, a FortiWeb administrator tests a new form input value.

The hidden Markov model (HMM) marks the input as abnormal, whereas the support vector machine (SVM) model identifies it as normal. FortiWeb permits the request.

What does this outcome indicate about FortiWeb ML anomaly-detection behavior?

Explanation

FortiWeb uses HMM as a first layer to identify values that deviate from the learned parameter pattern. An HMM anomaly is evaluated by the second-layer SVM threat models to determine whether it is an actual attack or a benign anomaly. An SVM-normal result therefore permits an unusual but non-malicious input.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!