Multidimensional Network Monitoring for Intrusion Detection

2002/06/13 by Vladimir Gudkov, Gudkov, Vladimir, Joseph E. Johnson +1
Computer Science · #C.2.0. #C.2.3. #C.2.5 #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Network Security and Intrusion Detection #cs.CR

paper · pdf · doi:10.48550/arxiv.cs/0206020

Talk at the International Conference on Complex Systems, June 9-14, 2002, Nashua, NH

arxiv created 2002/06/13 · openalex publication_date 2002/06/13 · arxiv updated 2009/11/30 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

An approach for real-time network monitoring in terms of numerical time-dependant functions of protocol parameters is suggested. Applying complex systems theory for information flow analysis of networks, the information traffic is described as a trajectory in multi-dimensional parameter-time space with about 10-12 dimensions. The network traffic description is synthesized by applying methods of theoretical physics and complex systems theory, to provide a robust approach for network monitoring that detects known intrusions, and supports developing real systems for detection of unknown intrusions. The methods of data analysis and pattern recognition presented are the basis of a technology study for an automatic intrusion detection system that detects the attack in the reconnaissance stage.

Related

• New approach for network monitoring and intrusion detection
• A Multi-Dimensional approach towards Intrusion Detection System
• 6. 08102 Working Group – Requirements for Network Monitoring from an IDS Perspective
• Anticipated Network Surveillance -- An extrapolated study to predict cyber-attacks using Machine Learning and Data Analytics
• Network Activities Recognition and Analysis Based on Supervised Machine Learning Classification Methods Using J48 and Naïve Bayes Algorithm