New ways to detect network attacks sooner
By Lauren C. Williams
Apr 25, 2019
Army researchers may have figured out how to detect bad actors earlier in their attacks, which will help better defend Defense Department networks.
Cyber intrusions are currently detected by analysts who monitor data transmitted from the defended network’s detection sensors to central analysis severs. The process requires so much bandwidth that most systems only send analysts alerts or summaries, which means some intrusions go undetected.
Now, researchers with Army Research Laboratory and Towson University found that compressing the traffic allowed analysts to detect intrusions earlier in the transmission process.
https://defensesystems.com/articles/2019/04/30/arl-intrusion-detection.aspx
