Class(sec:AnomalyDetectionSystem complete annotation(dc:description "In anomaly detection, the system administrator defines the baseline, or normal, state of the network?s traffic load, breakdown, protocol, and typical packet size. The anomaly detector monitors network segments to compare their state to the normal baseline and look for anomalies. (Webopedia)"^^<http://www.w3.org/2001/XMLSchema#string>)
sec:Behaviour-BasedIntrusionDetectionSystem)
SubClassOf(sec:AnomalyDetectionSystem sec:ByDetectionMethod)