New approach for network monitoring and intrusion detection

2001/10/05 by Vladimir Gudkov, Gudkov, Vladimir, Joseph E. Johnson +1
Computer Science · #Internet Traffic Analysis and Secure E-voting #Network Security and Intrusion Detection #Network Traffic and Congestion Control #cs.CR

paper · pdf · doi:10.48550/arxiv.cs/0110019

arxiv created 2001/10/05 · arxiv updated 2009/11/30

Abstract

The approach for a network behavior description in terms of numerical time-dependant functions of the protocol parameters is suggested. This provides a basis for application of methods of mathematical and theoretical physics for information flow analysis on network and for extraction of patterns of typical network behavior. The information traffic can be described as a trajectory in multi-dimensional parameter-time space with dimension about 10-12. Based on this study some algorithms for the proposed intrusion detection system are discussed.

Related

• Multidimensional Network Monitoring for Intrusion Detection
• A Multi-Dimensional approach towards Intrusion Detection System
• A Taxonomy of Malicious Traffic for Intrusion Detection Systems
• Network Activities Recognition and Analysis Based on Supervised Machine Learning Classification Methods Using J48 and Naïve Bayes Algorithm
• Statistical Modelling of Computer Network Traffic Event Times