To detect previously unknown types of attacks on computer networks, existing technologies are facing huge challenges. Anomaly detection methods have to deal with a huge amount of data, where "normal" and "suspicious" activities have to be distinguished. AIT is working on the development of anomaly detection algorithms and automatic classification and recognition of suspicious activities.