Tag: hybrid attack detection