What intrusion detection systems uses statistical analysis to detect intrusions?

Statistical anomaly-based intrusion detection systems (IDS) utilize statistical analysis to identify deviations from established normal behavior patterns within network traffic or system activities. By establishing a baseline of normal operations, these systems can flag unusual patterns that may indicate potential intrusions or malicious activities. Techniques such as machine learning and statistical modeling are often employed to refine detection capabilities and reduce false positives. Examples of such systems include SNORT and Bro/Zeek, which incorporate statistical analysis in their detection methodologies.