NATE: Network Analysis of Anomalous Traffic Events, a low-cost approach

摘要: A new approach to network intrusion detection is needed solve the monitoring problems of high volume data and time constraints for Intrusion Detection System (IDS) management. Most current IDS's have not been specifically designed speed traffic or low maintenance. We propose a solution these which we call NATE, Network Analysis Anomalous Traffic Events. Our features minimal measurement, an anomaly-based method, limited attack scope. NATE similar other lightweight approaches in its simplified design, but our approach, being anomaly based, should be more efficient both operation maintenance than approaches. present method perform empirical test using MIT Lincoln Lab's data.