3
2006.
Data Mining for Anomalous Network Payload Detection
Network intrusion detection based on packet payload analysis is presented. Quick overview of current IDS state of the art is given. Current prevailing methods for network intrusion detection based on packet meta data, headers, will are compared with method proposed in paper. Reasoning behind packed payload analysis for intrusion detection are presented. Application of data mining methods for packet payload analysis is considered. Issues with payload analysis, like performance and false negatives and positives, will are explained.