Her model used statistics for anomaly detection .
Her model resulted in an early IDS at SRI International named the Intrusion Detection Expert System ( IDES ) , which ran on Sun workstations and could consider both user and network level data .
Her model used statistics for anomaly detection , and resulted in an early IDS at SRI International named the Intrusion Detection Expert System ( IDES ) , which ran on Sun workstations and could consider both user and network level data .