Early Warning Detection of Computer Network Attacks Against Mobile Networks

The XPRT Solutions,Inc/New Jersey Institute of Technology /Network Security Solutions, Inc (XNN) team proposes to develop the concept of the PRIDE (PRedictive Intrusion DEtection) tool. PRIDE is an anomaly detection technology tool for network attacksprediction. Phase I is used to refine the concepts of PRIDE, whereas Phase II will develop a prototype for testing and evaluation. PRIDE consists of far and near time-horizon components. Far-PRIDE operates with a far-time horizon. It uses a combinedanomaly and signature intrusion platform along with the alert fusion mechanism to construct representative alert scenarios and models that include Discovery, Probing/Scanning and Stealth (DPSS) intrusions as they transition into Escalation of Privilege(EoP) and/or Denial of Service (DoS) attacks. Thus, emerging attack scenarios are evaluated as to their similarity to the representative scenario models and ranked as to the severity of the threat they pose, thus setting the stage for early warning.Near-PRIDE will generate prediction of intrusion attacks, over the near time horizon, by estimating the probability of generalized threshold violations, based on probability density function similarity computations for specific times in the future. Nearand Far-PRIDE operate in unison as to increase the detection rate while decreasing the false alarm rate. The proposed technology can be used in the commercial world to not only protect networks, but also to react to network attacks prior to theiroccurrence. This enhances the state of the art technology where typically only protection mechanisms are put in place.