| 摘要 |
<p>A broad-scope intrusion detection system analyzes traffic coming into multiple hosts or other customers' computers or sites (510). This provides additional data for analysis as compared to systems that just analyze the traffic coming into one customer's site. Additional detection schemes can be used to recognize patterns that would otherwise be difficult or impossible to recognize with just a single customer detector. Standard signature detection methods can be used. Additionally, new signatures can be used based on broad-scope analysis goals.</p> |
