/ 
IDS-Algorithms-1.02
River stage zero No dependents
/ IDS::Algorithm::KruegelVigna

NAME

IDS::Algorithm::KruegelVigna - an IDS algorithm based on the Kruegel and Vigna paper ("SEE ALSO").

SYNOPSIS

A usage synopsis would go here. Since it is not here, read on.

DESCRIPTION

See IDS::Algorithm.pm docs for any functions not described here.

This algorithm is HTTP-specific and will not work with any other data source.

This algorithm requires two passes over the training data to function properly.

new()
new(params)
new(filehandle, params)

Create the object for the algorithm. If the parameters are supplied, they are used; otherwise everything is defaults (unsurprisingly). If a filehandle is supplied, the filehandle is taken as the source for a load operation.

AUTHOR INFORMATION

Copyright 2005-2007, Kenneth Ingham. All rights reserved.

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

Address bug reports and comments to: ids_test at i-pi.com. When sending bug reports, please provide the versions of IDS::Test.pm, IDS::Algorithm.pm, IDS::DataSource.pm, the version of Perl, and the name and version of the operating system you are using. Since Kenneth is a PhD student, the speed of the response depends on how the research is proceeding.

BUGS

Please report them.

SEE ALSO

IDS::Test, IDS::DataSource, IDS::Algorithm

"Anomaly detection of web-based attacks" by Christopher Kruegel and Giovanni Vigna, pages 251--261 in Proceedings of the 10th ACM conference on computer and communications security, ACM Press, 2003, ISBN 1-58113-738-9. http://doi.acm.org/10.1145/948109.948144

libAnomaly, by Darren Mutz, Wil Robertson, Fredrik Valeur, Christopher Kruegel, Giovanni Vigna, and Richard Kemmerer. http://www.cs.ucsb.edu/~rsg/libAnomaly/index.html