The receivable flag bit set of each state in the model was defined,meanwhile the timeout anomaly of each state was refined,by which varied anomaly can be detected accurately so as to defend the known and unknown abnormal behaviors.

• 模型中规定了各种状态下可接收的标志位集合；同时还细化了各状态下的超时异常；据此可准确地检测出各种异常；以抵御已知和未知的非法行为.