2) Expert Knowledge: The expert knowledge module contains
the rules, definitions and sequence of events that describe
to the LES what a black hole attack looks like. This expert
knowledge is effectively a definitions file that is processed by
the LES and as such, the expert knowledge can be swapped out
for other expert knowledge which gives ADIOS extensibility
in detecting new attacks and variations on old attacks. Constructing
expert knowledge requires understanding the features
of the ADIOS architecture as well as the language used by the
LES at the center. Once these requirements are met, it is a
trivial matter to construct expert knowledge to detect attacks once the author has an understanding of how the particular
attack works