Answers are grounded in this paper and cite their sources.
We present POSEIDON, a new anomaly-based network intrusion detection system. POSEIDON is payload-based, and has a two-tier architecture: the first stage consists of a self-organizing map, while the second one is a modified PAYL system. Our benchmarks on the 1999 DARPA data set show a higher detection rate and lower number of false positives than PAYL and PHAD
No takes yet. Share an insight, caveat, or question.
Bolzoni et al. (2006) studied this question.
Synapse has enriched 8 closely related papers on similar clinical questions. Consider them for comparative context: