入侵特征对于入侵检测系统至关重要，它们往往由系统属性和事件序列组成，时序关系是描述它们的关键。
Intrusion signatures are important in intrusion detection system, they are usually composed of the system attributes and event sequences, in which time plays a critical role.
攻击分类研究对于系统地分析计算机系统脆弱性和攻击利用的技术方法有着重要的意义，这有助于构造高效的入侵检测方法。
The study of attack classification has a significant role to analyze computer system vulnerability and technique used for attack and can help to build effective detection methods.
对于获得的数据，分析模块采用多种方式综合分析入侵行为，包括协议分析、专家系统、应用数据还原、入侵检测等技术。
Many methods are used in analysis model to detect intrusion actions, such as protocol analysis, expert system, application layer data reconstruction, intrusion detection.
应用推荐