Abstract

Intrusion detection is used to monitor and capture intrusions into computer and network systems which attempt to compromise their security. Many intrusions manifest in dramatic changes in the intensity of events occuring in computer networks. Because of the ability of exponentially weighted moving average control charts to monitor the rate of occurrences of events based on their intensity, this technique is appropriate for implementation in threshold based algorithms.

Keywords

MSC

94A13, 94C12, 68M15, 68W99, 62B15

Cite this article

@article{cai-1953,
  author  = {Petar Čisar and Saša Bošnjak and Sanja Maravić Čisar},
  title   = {EWMA Based Threshold Algorithm for Intrusion Detection},
  journal = {Computing and Informatics},
  volume  = {29},
  number  = {6+},
  pages   = {1089--1101},
  year    = {2010},
  issn    = {1335-9150},
  url     = {https://cai.type.sk/content/2010/6%2B/ewma-based-threshold-algorithm-for-intrusion-detection/}
}
Download .bib