A mechanism is provided for performing intrusion decision-making using a plurality of approaches. Detection approaches may include, for example, signature-based, anomaly-based, scan-based, and danger theory approaches. When event information is received, each approach produces a result. A consensus of...http://www.google.com/patents/US20050278178?utm_source=gb-gplus-sharePatent US20050278178 - System and method for intrusion decision-making in autonomic computing environments
