Anomaly detection based on feature extraction of unknown protocol payload format

摘要

Intrusion detection technology is mainly divided into two categories: Misuse Detection and Anomaly Detection. Misuse Detection cannot detect unknown attacks, and the rate of false negatives is high. Abnormal Detection's false alarms rate is high, and prac