Proposal of algorithms for statistical intrusion detection

Abstract

Intrusion detection is used to monitor and capture intrusions into computer and network systems that attempt to compromise their security. Many intrusions (attacks) manifest in changes in the intensity of events occurring in computer networks. Many different approaches exist for statistical intrusion detection. One of them is behavioural analysis, thus in accordance with this, a jump-based and adaptive maximum-based algorithms are presented. The first algorithm is based on determining the increase of average traffic in successive time intervals, while the other is based on statistical adaptive value of upper threshold of traffic.