Employing stepping-stones to launch attacks has become more and more popular since the emerging of the Internet. Most professional attackers use this way to gain benefits and protect themselves as well. Even worse, most computers under stepping-stone intrusion have no idea they are actually under attacks since unlike other cyberattacks, stepping-stone intrusion does not present any apparent attacking sign. Detecting stepping-stone intrusion is thus important and critical to the security of the Internet infrastructure. In this paper, we summarize the most typical approaches developed to detect stepping-stone intrusion since 1995 including host-based and network-based detection algorithms. At the end of the paper, we discuss the future trend of the development of stepping-stone intrusion detection, especially, focusing on stepping-stone intrusion upstream detection. We also introduce the progress we have made in stepping-stone intrusion upstream detection by using the distribution of inter computer network packets time gap.