Features of the Practical Implementation of the Method for Managing Observations of the State of Monitored Objects in Intrusion Detection Systems

• Published in: Applied sciences 2023-02, Vol.13 (3), p.1831
• Main Authors: Boldyrikhin, Nikolay V., Safaryan, Olga A., Korochentsev, Denis A., Reshetnikova, Irina V., Alferova, Irina A., Manakova, Anastasia N.
• Format: Article
• Language: English
• Subjects: Accuracy; Algorithms; Alliances; controlled object; dynamic model; Dynamic models; filtering; Information systems; Information technology; intrusion detection system; Intrusion detection systems; Machine learning; Methods; Monitoring; observation management; observation optimization; Optimization; Resource management; Software
• ISSN: 2076-3417; 2076-3417
• DOI: 10.3390/app13031831

This article discusses the possibility of generalizing the existing methods of optimization of observations to the problems of resource management of intrusion detection systems. The aim of this work is to study the applied aspects of the application of the surveillance optimization method, which increases the efficiency of using the resources of intrusion detection systems. The set goal of the work was achieved through the following tasks: (1) on the basis of experimental data, the development of a dynamic model of the controlled object and the observation model was carried out; and (2) numerical modeling of the solution to the problem of optimizing observations of the state of monitored objects in the intrusion detection system was carried out. As a result of this research, modern approaches to the management of resources of intrusion detection systems have been analyzed. A practical study of the possibility of using the mathematical apparatus for optimizing observations in relation to the problems of resource management of intrusion detection systems has been carried out. The most important scientific findings are as follows: (1) model of the dynamics of the controlled object; (2) model for monitoring the state of controlled objects; and (3) procedure for optimizing the plan for monitoring the state of monitored objects in intrusion detection systems. The significance of the results obtained is confirmed by a numerical experiment, within the framework of which a relative gain in the accuracy of assessing the state of controlled objects of 99.9% was obtained in comparison with a uniform observation plan.