Statistical abnormality examining and examining based on rule are generally accepted in intrusion detection module.

• 采用反常检测统计和基于规则的检测技术进行入侵检测。