In real-time situations, the intrusion detection systems can only capture the indications of the attack. They fail to ascertain whether an attack has occurred. The uncertainties in intrusion analysis are called BLANK uncertainties.