Abstract: A method of increasing the efficiency of unknown type intrusion detection, based on using of decoys in the network, is suggested. A model that allows to tie likelihood of an attack on a decoy for each time with parameters of decoys, network and the external environment is described. A generalized method for obtaining the optimal configuration of decoys in the network in a time-varying input parameters is shown.
Keywords: intrusion detection, decoys, increasing efficiency
Authors and copyright holders:
—
For citation:
Aleynov Yu. V. The method for increasing the efficiency of unknown type intrusion detection by introducing false targets in the network. Doklady Tomskogo gosudarstvennogo universiteta sistem upravleniya i radioelektroniki, 2014, no. 2(32), pp. 40–43.
Executive Secretary of the Editor’s Office
Editor’s Office: 40 Lenina Prospect, Tomsk, 634050, Russia
Phone / Fax: + 7 (3822) 701-582
Viktor N. Maslennikov
Executive Secretary of the Editor’s Office
Editor’s Office: 40 Lenina Prospect, Tomsk, 634050, Russia
Phone / Fax: + 7 (3822) 51-21-21 / 51-43-02