HMM Detection Model for Complicated Network Attacks
Tao Long-ming · Jisuanji gongcheng · 2009
It is difficult to detect complicated network attacks effectively.The inherent characteristics of complicated network attacks are analyzed.A new HMM model for detecting sophisticated network attacks is proposed.The alarm event sequences from different network monitors are correlated and their inherent relationship is mined so as to detect complicated network attacks.Experimental results show that the model can recognize complicated network attacks effectively.