برای دریافت متن اصلی مقاله، عدد 1 را به 09903207833 تلگرام نمایید abstrakt: Data preprocessing is widely recognized as an important stage in anomaly detection. This paper reviews the data preprocessing techniques used by anomaly-based network intru- sion detection systems (NIDS), concentrating on which aspects of the network traffic are analyzed, and what feature construction and selection methods have been used. Motiva- tion for the paper comes from the large impact data preprocessing has on the accuracy and capability of anomaly-based NIDS. The review finds that many NIDS limit their view of network traffic to the TCP/IP packet headers. Time-based statistics can be derived from these headers to detect network scans, network worm behavior, and denial of service attacks. A n ...
ادامه مطلب ...
چهارشنبه 24 شهریور 1395 ساعت 18:48