The purpose of NIDES (Next-Generation Intrusion Detection System) is to detect intrusive and suspicious activities on computer systems in real time. Audit data, representing computer system activity of individual subjects, is collected by NIDES from one or more systems (known as target hosts). Both statistical and rule-based analysis of the audit data is continuously performed, and the results are resolved and reported to a graphical user interface (known as the security officer user interface.)

• 3sri.pdf