The approachof anomaly detection is a vigorously adaptive technique because it can detect unknown intrusions. The paper summarizes the advantage and the shortcoming of known anomaly-detection approaches in the past,which is based on the model of intrusion detection proposed by Dorothy Denning. Moreover ,the development current of anomaly-detection is proposed on the above.