Network intrusion detection module will analyze the package from data packet capture modules and combine network intrusion rule database, and then transmit the results to the system management module.

The function of the core layer is mainly used to coordinate the system of backup to capture data from the operation system, and perform management accordingly.

Among the recommendations at the end of the survey is for management to incorporate a "listening system" to capture social media data and transform it into metrics.