2009 Fourth International Conference on Frontier of Computer Science and Technology
DOI: 10.1109/fcst.2009.97
Full text: Download
Geometrical Structure Anomaly Detection (GSAD) model to detect intrusion using the packet payload in the network. GSAD takes into account the correlations among the packet payload features arranged in a geometrical structure. The representation is based on statistical analysis of Mahalanobis distances among payload features, which calculate the similarity of new data against precomputed profile.