if I am building classifier using SVM or NN to detect an Intrusion, am I building Signature-Based Intrusion Detection System or Anomaly-Based Intrusion Detection System?
Richard Rauschke
This is anomaly based detection to my understanding, as this is the focus of my research also (SVM). The idea of anomaly-based IDS is that we hope to identify possibly malicious, but previously unknown behavior by classification based on models constructed with training data (supervised learning).
0 votes
0 thanks
- Badges
- Science topic
- Similar topics
- Computer Science and Engineering
- Artificial Intelligence
More Walid Ahmed's questions See All
Similar questions and discussions