A High-Efficiency Intrusion Prediction Technology Based on Markov Chain
Laicheng Cao · Computational Intelligence and Security · 2007
Intrusion detection is only able to detect intrusions after the attacks occurred. In this paper, an intrusion prediction technology based on Markov chain is pointed out, a dynamic load-balancing algorithm is adopted in its predicting model, which can avoid packet loss and false negatives in high-performance network with handling heavy traffic loads in real-time. Experiments show that this technology have good performance on real-time prediction, false alarm rate is lower than 0.6% and false negative rate is tend to 1%, so this prediction technology can contain or stop the attack in real time, it can also enhance the efficiency of finding intrusion.