The issue with using the anomaly-based intrusion detection approach is the problem of identifying correct, normal behavior.

• 使用基于异常的入侵检测的主要问题是判断的合理、正常的行为的策略。