As an example, an IDS may well hope to detect a trojan on port 12345. If an attacker experienced reconfigured it to use a distinct port, the IDS might not be capable to detect the existence of your trojan. Diminished Wrong positives - correlating intrusion alerts with data from other programs allows safety groups to much more correctly distingui