Because of this, you can find an increasing need for IDSes to detect new behavior and proactively determine novel threats and their evasion techniques. For instance, an IDS may well anticipate to detect a trojan on port 12345. If an attacker experienced reconfigured it to make use