Intrusion process consists of a series of intrusion behavior,which comprises one or some intrusion events. There are various relations among these intrusion events.
入侵过程由一系列入侵行为组成,每个入侵行为包含一个或多个入侵事件,这些事件间可能存在各种各样的关系。
参考来源 - 入侵事件建模研究 in C·2,447,543篇论文数据，部分数据来源于NoteExpress
These rules ean be used to detect intrusion behavior later.
这些规则将来可以被用来检测入侵行为。
Intrusion detection system can discover potential intrusion behavior by collecting and analyzing various network data.
入侵检测通过收集各种网络数据，从中分析和发现可能的入侵攻击行为。
In addition, an actual intrusion with a small deviation may match normal patterns. So the intrusion behavior cannot be detected by the detection system.
如果一个实际的入侵行为稍有偏差就有可能与正常的模式相匹配，而异常检测系统则无法检测到这种入侵行为。
应用推荐