Defines a framework for detection of intrusions in IT systems, including intrusions that are intentional or unintentional, legal or illegal, harmful or harmless and unauthorized access by insiders or outsiders.
SANS 15947:2003 history
2003SANS 15947:2003 Information technology - Security techniques - IT intrusion detection framework