Setting up an intelligent IDS based on Markov chains theory

Abstract

The tremendous growth of the web-based applications has increased information security vulnerabilities over the Internet. Security administrators use Intrusion-Detection System (IDS) to monitor network traffic and host activities to detect attacks against hosts and network resources. The solutions proposed in the literature actually achieved good results for the detection rate, while there is still-room for reducing the false positive rate or even predict beforehand attack according to a website visitor behavior. For this purpose we propose a probabilistic approach applied for an “intelligent IDS” whose main role is to predict attacks on a website according to a real time probabilistic calculation based on Markov chains.