Summary

---

Different categories of intrusion detection systems have their own advantages and points of weakness. Combining various types of these tools helps to strengthen the advantages of some and eliminate the drawbacks of others, thus allowing the creation of an efficient intrusion detection infrastructure. Combining all these technologies will significantly improve the level of protection for corporate networks against attacks and misuse, make the security policy more stringent, and make network-resource operation more flexible.

---