The MITRE ATT&CK framework counts 530 ways to exploit enterprise systems-and every month new techniques are added. Cybersecurity vendors continuously offer new detective solutions, but purchasing, deploying, and maintaining a specific product is expensive. It's time to reflect on the underlying principles of effective anomaly-based intrusion detection.

中文翻译：

---

有效的基于异常的入侵检测的七个黄金原则


MITRE ATT&CK 框架统计了 530 种利用企业系统的方法，并且每个月都会添加新技术。网络安全供应商不断提供新的侦探解决方案，但购买、部署和维护特定产品的成本很高。是时候反思有效的基于异常的入侵检测的基本原理了。