Security policies

used to direct

Agent-based Model

detecting intrusions via

Event-based model