A NIDS/NIPS that detects intrusions by comparing network traffic against the previously established baseline can be classified as: (Select all that apply)
1. Heuristic
2. Anomaly-based
3. Behavioral
4. Signature-based