News for hackers. Stuff that matters.
Re:Show HN: Intrusion Detection in Real-time by siddhartb_ on Wednesday April 22, 2020 @09:03AM (#22945073)
Code is available in C++, Python, Ruby, R, and Rust at https://github.com/bhatiasiddharth/MIDAS
Re:Show HN: Intrusion Detection in Real-time by janesconference on Thursday April 23, 2020 @06:03AM (#22954358)
Really cool project. I'm doing a real-time version (gets input on stdin, sends output on stdout), will probably release the code soon.
Re:Show HN: Intrusion Detection in Real-time by shivin9 on Wednesday April 22, 2020 @09:12AM (#22945156)
Can this detect DDoS like attacks also?
Re:Show HN: Intrusion Detection in Real-time by siddhartb_ on Wednesday April 22, 2020 @09:13AM (#22945172)
We handle locality in terms of both source and destination, therefore we should be able to handle both DoS and DDoS attacks.
Re:Show HN: Intrusion Detection in Real-time by NimishMishra on Wednesday April 22, 2020 @11:25AM (#22946534)
Looks interesting. Better than some of the static detection algorithms out there
Re:Show HN: Intrusion Detection in Real-time by GurbakshSharma on Wednesday April 22, 2020 @10:51AM (#22946142)
can you list out use cases where we can use this algorithm?
Re:Show HN: Intrusion Detection in Real-time by siddhartb_ on Wednesday April 22, 2020 @11:04AM (#22946306)
In addition to detecting intrusions, it can detect fake ratings and frauds. Basically finding anomalous and suspicious behavior in any dynamic (time-evolving) graph.
Re:Show HN: Intrusion Detection in Real-time by udaychopra on Thursday April 23, 2020 @12:58AM (#22952947)
Hi, how will the performance be affected if let's say time ticks are not uniform?
Re:Show HN: Intrusion Detection in Real-time by siddhartb_ on Thursday April 23, 2020 @01:12AM (#22953019)
Great question, it will be interesting to try it out. Temporal relations should be affected a bit but MIDAS should be able to detect anomalies.
Re:Show HN: Intrusion Detection in Real-time by shera on Wednesday April 22, 2020 @09:34AM (#22945347)
Are you taking context into consideration? For example, Donald Trump's tweets will be much higher than an ordinary person's.
Re:Show HN: Intrusion Detection in Real-time by siddhartb_ on Wednesday April 22, 2020 @09:36AM (#22945369)
Yes, we take expected count of a particular user/source node into consideration.