Increasing the Sensitivity of the Method of Early Detection of Cyber-Attacks in Telecommunication Networks Based on Traffic Analysis by Extreme Filtering

Energies

Andrey Privalov¹  Vera Lukicheva¹  Igor Saenko²  Igor Kotenko² 

[1] Emperor Alexander I Saint-Petersburg State Transport University, 9 Moskovsky pr.,St. Petersburg 190031, Russia;Saint-Petersburg Institute for Informatics and Automation of Russian Academy of Sciences (SPIIRAS), 39, 14 Liniya,St. Petersburg 199178, Russia;

关键词: detection of cyberattacks;    extreme filtering;    traffic decomposition;    fuzzy logic algorithm;   

DOI  :  10.3390/en13112774

来源: DOAJ

【 摘 要 】

The paper proposes a method for improving the accuracy of early detection of cyber attacks with a small impact, in which the mathematical expectation is a fraction of the total, and the pulse repetition period is quite long. Early detection of attacks against telecommunication networks is based on traffic analysis using extreme filtering. The algorithm of fuzzy logic for deciding on the results of extreme filtering is suggested. The results of an experimental evaluation of the proposed method are presented. They demonstrate that the method is sensitive even with minor effects. In order to eliminate the redundancy of the analyzed parameters, it is enough to use the standard deviation and the correlation interval for decision making.

【 授权许可】

Unknown