Anomaly-Based Network Intrusion Detection Using Outlier Subspace Analysis: A Case Study

摘要

This paper employs SPOT (Stream Projected Outlier de-Tector) as a prototype system for anomaly-based intrusion detection and evaluates its performance against other major methods. SPOT is capable of processing high-dimensional data streams and detecting novel attacks which exhibit abnormal behavior, making it a good candidate for network intrusion detection. This paper demonstrates SPOT is effective to distinguish between normal and abnormal processes in a UNIX System Call dataset.