The aim of research is to increase the network attack detection accuracy by means of fuzzy logic. This paper considers an approach to intrusion detection using fuzzy logic. The approach is based on network monitoring of the variables characteristic of different network anomalies, such as ratio of the incoming traffic to the outgoing, packet size, etc. Every type of menace is characterized by a vector of fuzzy values describing the network state when this menace is present. These vectors constitute the fuzzy rule matrix. This article proposes computation of the integral indicator of the presence of any menace using the rule matrix.
Keywords-computer networks, distributed denial of service, network security, fuzzy logic, intrusion detectionWorld-wide spread of networking technologies leads to the fact that network attacks are one of the most efficient means of malicious activity with the purpose of unauthorized access to the information, leading information systems out of operation, blocking or obstructing the access to network resources for legitimate users. In the conditions of active technology progress and increasing of malefactor skills ensuring of network security should be a continuous process.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.