The method for increasing the efficiency of unknown type intrusion detection by introducing false targets in the network

Download article in PDF format

Authors: Aleynov Yu. V.

Annotation: A method of increasing the efficiency of unknown type intrusion detection, based on using of decoys in the network, is suggested. A model that allows to tie likelihood of an attack on a decoy for each time with parameters of decoys, network and the external environment is described. A generalized method for obtaining the optimal configuration of decoys in the network in a time-varying input parameters is shown.

Keywords: intrusion detection, decoys, increasing efficiency