IDS::Algorithm::KruegelVigna - an IDS algorithm based on the Kruegel and Vigna paper ("SEE ALSO").
A usage synopsis would go here. Since it is not here, read on.
See IDS::Algorithm.pm docs for any functions not described here.
This algorithm is HTTP-specific and will not work with any other data source.
This algorithm requires two passes over the training data to function properly.
- new(filehandle, params)
Create the object for the algorithm. If the parameters are supplied, they are used; otherwise everything is defaults (unsurprisingly). If a filehandle is supplied, the filehandle is taken as the source for a load operation.
Copyright 2005-2007, Kenneth Ingham. All rights reserved.
This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.
Address bug reports and comments to: ids_test at i-pi.com. When sending bug reports, please provide the versions of IDS::Test.pm, IDS::Algorithm.pm, IDS::DataSource.pm, the version of Perl, and the name and version of the operating system you are using. Since Kenneth is a PhD student, the speed of the response depends on how the research is proceeding.
Please report them.
"Anomaly detection of web-based attacks" by Christopher Kruegel and Giovanni Vigna, pages 251--261 in Proceedings of the 10th ACM conference on computer and communications security, ACM Press, 2003, ISBN 1-58113-738-9. http://doi.acm.org/10.1145/948109.948144
libAnomaly, by Darren Mutz, Wil Robertson, Fredrik Valeur, Christopher Kruegel, Giovanni Vigna, and Richard Kemmerer. http://www.cs.ucsb.edu/~rsg/libAnomaly/index.html