Taxonomy of statistical based anomaly detection techniques for intrusion detection

Abstract

Security threats to the computer systems have raised the importance of intrusion detection systems. With the advent of new vulnerabilities to computer systems new techniques for intrusion detection have been implemented. Statistical based anomaly detection techniques use statistical properties and statistical tests to determine whether "observed behavior" deviate significantly from the "expected behavior". Statistical based anomaly detection has been a wide area of interest for researchers since it provides the base line for developing a promising technique. This paper presents a guideline for statistical based anomaly detection techniques with the perspective of various scenarios and areas of implementation. Inde.x TermsAnomaly detection, Intrusion detection, Security threats, Statistical analysis technique, Statistical models.