The new model adopt the method with integrate of detect based on misuse and detect based on abnormity, it overcome the defect of used single technique, and improves the detect efficiency of system.

• 新模型采用了基于误用检测和异常检测相结合的方法，克服了采用单一技术的缺点，从而提高了系统检测的效率。