Processing of massive audit data streams for real-time anomaly intrusion detection

摘要

Intrusion detection is an important technique in the defense-in-depth network security framework. Most current intrusion detection models lack the ability to process massive audit data streams for real-time anomaly detection. In this paper, we present an