Current misuse detection systems are of little use for new attacks and they cannot automatically update their rule databases.

• 摘要无法检测到未知攻击以及不能自动更新知识库是现有误用检测系统的两大缺点。