Report this document Protection of Communication Infrastructures · PDF file Basic idea – detect behavior that differs significantly from normal use: Users and systems have “normal” use pattern:.