New intrusion-detection software is being developed that mimics biological immune systems, learning to watch for unusual events. Other software randomly generates "detectors," throws away those that match normal behavior, and retains those that represent abnormal behavior.