 Its advantage is the simplicity of adding known attacks to the model.Its disadvantage is its inability to recognize unknown attacks.For more information on Misuse Detection, including papers written on the subject, consider the following