Conventional intrusion detection systems (IDS) examine packets going through the network and filter those suspiciously malicious packets out. When attacks happen, the IDS sends warning messages to the administrator. However, an IDS can only detects and bl