The bayesian receiver operating characteristic curve – an effective approach to evaluate the IDS performance

Abstract

The aim of intrusion detection systems is to protect the computer networks from attacks or unauthorized access to their valuable resources. For that purpose they have to perform real-time processing of current system activity and make a decision whether the pattern is normal or intrusive. The present paper is an extension to our previous work, which presented an anomaly-based IDS model, based on some decoding algorithms. It introduces the evaluation of the proposed methodology, using the Bayesian Receiver Operating Characteristics Curve.