Multidimensional Network Monitoring for Intrusion Detection
Vladimir Gudkov, Joseph E. Johnson
Abstract
An approach for real-time network monitoring in terms of numerical time-dependant functions of protocol parameters is suggested. Applying complex systems theory for information flow analysis of networks, the information traffic is described as a trajectory in multi-dimensional parameter-time space with about 10-12 dimensions. The network traffic description is synthesized by applying methods of theoretical physics and complex systems theory, to provide a robust approach for network monitoring that detects known intrusions, and supports developing real systems for detection of unknown intrusions. The methods of data analysis and pattern recognition presented are the basis of a technology study for an automatic intrusion detection system that detects the attack in the reconnaissance stage.
Create a lesson
Related papers
Decision-Focused Learning for Cyber-Physical Risk-Aware Power Grid Operations
Ayesha Siddiqua Dina, Ebisa D. Wollega, Afzal Hossain Sohag
ToFu: Exploiting and Fuzzing the LLM-Orchestrator-Tool Trust Boundary
Md Nazmul Islam Ananto, Pierre Prevost-Avenel, Colin Smith et al.
APEX-Harm: Evaluating Agent Safety in Shared Professional Workspaces
Ziyi Yang, Adel Bibi, Guohao Li et al.
A Systematic Study of Security Enforcement at Android Inter-Component Boundaries
Sandiyo Christan A
EviRepair: Evidence-Driven Agents for Reliable Vulnerability Repair
Yilian Shi, Qingyu Liu, Tianyi Zhou et al.
Towards Safe World Models: Risks, Defenses, and Evaluation
Xiaoma Wang, Litian Zhang, Xinze Shi et al.