olemus
ISO/IEC 18043, 27033, 27039:
formaalne sissetungide avastamise protsess,
üldiselt väljendub teadmuse kogumises
ebanormaalse kasutamise mustrite kohta ning
ka selle kohta, milline nõrkus kuidas ja miks ära kasutati
ning millal see toimus
= formal process of detecting intrusions, generally characterized by gathering knowledge about abnormal usage patterns, as well as what, how, and which vulnerability has been exploited to include how and when it occurred

ISO/IEC 29180:
arvutisüsteemi või võrgu sündmuste
seire ja analüüsimise protsess sissetungide avastamiseks
= process of monitoring the events occurring in a computer system or a network and analysing them for intrusions

ülevaateid
https://en.wikipedia.org/wiki/Intruder_detection

https://www.cse.wustl.edu/~jain/cse571-17/l_22id.htm

https://core.ac.uk/download/pdf/234677013.pdf

http://www2.cs.uh.edu/~acl/cs6397/Doc/2009-Elsevier-Anomaly-based%20network%20intrusion%20detection.pdf

https://iopscience.iop.org/article/10.1088/1742-6596/1000/1/012049/pdf

https://www.usenix.org/legacy/publications/library/proceedings/sec98/full_papers/lee/lee.pdf

https://www.cesar-conference.org/wp-content/uploads/2018/11/articles/C&ESAR_2018_J2-12_JM-FLAUS_Detection_intrusion_par_ML_pour_ICS.pdf

https://thesai.org/Downloads/IJARAI/Volume4No3/Paper_2-Application_of_Machine_Learning_Approaches_in_Intrusion_Detection_System.pdf

https://www.ripublication.com/ijaer19/ijaerv14n24_08.pdf

https://people.cs.vt.edu/~irchen/ps/Mitchell-CSUR14a.pdf

vt ka
- hostipõhine sissetungituvastuse süsteem
- sissetungituvastuse süsteem
- sissetungitõrje
- sissetungitõrje süsteem
- võrgupõhine sissetungituvastuse süsteem