THE STATISTICAL ANALYSIS OF A NETWORK TRAFFIC FOR THE INTRUSION DETECTION AND PREVENTION SYSTEMS

摘要

The systems of intrusion detection and prevention are considered, the operation of which is based on the study of network traffic anomalies (Anomaly-Based Intrusion Detection and Prevention Systems). Statistical analysis of time series describing the network traffic of various services and information services of modern telecommunication systems and networks is carried out. The homogeneity of network traffic according to various criteria is investigated, it is shown that the use of statistical analysis makes it possible to monitor the network activity successfully for intrusion detection and prevention of their impact on the protected information resources.