This paper presents the problem of intrusion detection in grid environments. Current intrusion detection technology is limited in providing protection against the attacks that may violate the security of grids and we determine the requirements to identify them, propose a distributed grid-based intrusion detection system architecture, and show how it overcomes the limitations of current technology by integrating the detection of the typical host computer and network attacks with the detection of grid-specific attacks and user behavior anomalies.