This could be combined with a other detectors for added assurance. In support of this, and in support of a related project on penetration testing of systems, we are building a database of flaws and attacks, not of scenerios. I'll report back here when we get something more definite to report. In the meantime, I invite you to send me copies of your favorite system flaw stories. We're also having a contest to name the intrusion detection system.
Every good system needs a name that forms a sexy acronym.
If you have any other suggestions, please let me know.