Fast detection of network intrusion
Xinjia Chen, Ernest Walker · Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE · 2011
In this paper, we propose new network intrusion detection techniques which promptly detect malicious attacks and thus lower the resulting damage. Moreover, our approach rigorously control the probability of falsely implicating benign remote hosts as malicious. Such technique is especially suitable for detecting DoS attackers and port-scan attackers routinely perform random "portscans" of IP addresses to find vulnerable servers to compromise. Our method performs significantly faster and also more accurate than other current solutions.