Wajih Ul Hassan

A First-Principles Evaluation of Graph-Based Network Intrusion Detection Systems

Graph-based network intrusion detection systems (GIDS) report strong benchmark detection metrics, but those metrics establish little about deployability. We approach the problem from first principles: rather than inheriting the preprocessing, windowing, and thresholding conventions of each published system, we ask what...