Learning Problem and BCJR Decoding Algorithm in Anomaly-based Intrusion Detection Systems

— The anomaly-based intrusion detection systems examine current system activity do find deviations from normal system activity. The present paper proposes a method for normal activity description using the Hidden Markov Models (HMM), which is tuned up using the gradient based method. The obtained model is utilized as a baseline, depicting the normal system activity. The main purpose is to distinguish the normal traces of user activity from abnormal ones using the BCJR decoding algorithm. Some results from the conducted simulation experiments are introduced as well.

• Type: Journal
• Year: 2007
• Where: JSW
• Authors: Veselina G. Jecheva, Evgeniya P. Nikolova
• Keywords: Anomaly-based Intrusion Detection, Gradient Based Method, JSW 2007, Normal Activity Description