New approach for network monitoring and intrusion detection
Vladimir Gudkov, Joseph E. Johnson
Abstract
The approach for a network behavior description in terms of numerical time-dependant functions of the protocol parameters is suggested. This provides a basis for application of methods of mathematical and theoretical physics for information flow analysis on network and for extraction of patterns of typical network behavior. The information traffic can be described as a trajectory in multi-dimensional parameter-time space with dimension about 10-12. Based on this study some algorithms for the proposed intrusion detection system are discussed.
Create a lesson
Related papers
Integrated Identity Protection for Semantic Communications in Embodied IoT Systems
Yu Zhang, JingQi Liu, Shuangrui Zhao et al.
Signed, Sealed, Leaked: Trust Beyond Signature for MCP Toolchains
Yichiet Aun, Mohammed A. Alhartomi, Jing Jie Tan et al.
Signed but Steerable: Measuring and Closing the Text-Vector Integrity Gap in Offline Retrieval-Augmented Generation
Georgios Feretzakis, Alexandros Papaspyridis
Towards Early Warning of Real-World Vulnerabilities: An Evidence-Aware Decoupled Method for CVSS Vector Prediction Based on Unstructured Disclosures
Jianhong Ma, Wenhao Li, Xixing Li et al.
Shoot on (Core)Sight: Re-enabling Secure Debug on the RP2350 with Photon-Emission Microscopy and Laser Fault Injection
Antoine Plin
CoRTeC: A Differentially Private Release for Synthetic Tabular Data, Decodable by Any Generator
Calister Nnona