Attack-norm separation uses rigorous signal detection models to isolate attack signals from normal data before attack identification. By drawing from science instead of heuristics, this approach promises more efficient, accurate, and inclusive attack identification.
Index Terms:
Cyberattack detection, Attack-norm separation, Signal detection models, Security and privacy, Detection systems
Citation:
Nong Ye, Toni Farley, "A Scientific Approach to Cyberattack Detection," Computer, vol. 38, no. 11, pp. 55-61, Nov. 2005, doi:10.1109/MC.2005.358