BNI is the outer protective device detecting and warning of attacks. Besides monitoring the availability of important services in the system, BNI has the ability to detect early undercover attacks, the characteristic of APT attacks and then give warnings to the system administrator to isolate and process the intruded computers, prevent hackers from penetrating deep into the system.