Anuprita S. Korde

BEAD: A Benford-Entropic Anomaly Detector for Mimicry-Resistant Intrusion Detection in Encrypted Network Traffic

Current intrusion detection systems lack the ability to monitor TLS-encrypted data which now constitutes most enterprise network traffic yet they need to identify malicious activities that differ from normal operations. The statistical detectors which use Benford's Law to track leading-digit frequencies provide non-dep...