A PREVENTION STRATEGY FOR SECURITY: A BAYESIAN APPROACH TO ANOMALIES DETECTION

摘要

Intrusion detection is one of the new frontiers in network security, but almost every implemented system is in trouble when it has to deal with new kind of attacks or when it has to give a real time response to predefined attacks. In this work, we assert that the way of improving intrusion detection is to consider the semantic aspects of the communication protocols. Furthermore, we analyze an intrusion detection model that tries to reach this goal putting together database logical design rules and new rules from Bayesian reasoning. In the final section, we sketch some application of the model and we show how to implement the model and how to face existing attacks using the model itself.