Signature-based, statistical anomaly-based and stateful protocol analysis are the three most common detection methods used by intrusion prevention systems.