 In a misuse detection approach, abnormal system behaviour is defined first, and then all other behaviour is defined as normal.It stands against the anomaly detection approach which utilizes the reverse