Classification tree and Kullback - Leibler distance - based anomaly intrusion detection approach

Abstract

In recent years anomaly detection has become an important area for both commercial interests as well as academic research. The intrusion detection process attempts to detect malicious attacks by examining various data collected during processes on the protected system. The present paper proposed an adaptive approach of anomaly based intrusion detection which is grounded on classification trees and relative entropy. The major results of the implemented simulation experiments are presented and discussed as well.