to study further those alerts which are highly suspicious but less frequent, the algorithm as above was improved by adding a parameter of lowest suspicion level to it.
为了不忽略出现不频繁但怀疑度高的报警,对该算法进行了改进,增加了最小怀疑度参数。
to find latent intrusion, the intrusion detection message exchange format(idmef) was extended with a concept of suspicion level proposed.