Functional Analysis of Computer Network Data

摘要

This paper examines the application of hierardchical cluster analysis to the charao terization of single machine SYN ACK time series. The purpose of the analysis is the identification of normal and abnormal activity for a small group of mail and web servers, Ultimately this information could be used to help analyze forensic data or as part of an on-line network or host based intrusion detection system.