However, in the intrusion prevention system, intercepting every packet, analyzing and matching some kind of attack need a great deal of time and system resource.

• 然而,入侵防御系统截获网络的每一个数据包,并分析、匹配其中是否具有某种攻击的特征需要花费大量的时间和系统资源。