an understanding of a small number of useful structural concepts using .... bringing all information to the same level of detail and consistency ...... user profiling, intruder profiling, signature analysis, network IDS, host IDS, distributed IDS, co