Upload
nicholas-park
View
27
Download
0
Tags:
Embed Size (px)
DESCRIPTION
Scientific Computing Department Faculty of Computer and Information Sciences Ain Shams University. Security of Grid Computing Environments. Supervised By: Mohammad F. Tolba Mohammad S. Abdel-Wahab Ismail A. Taha Presented By: Ahmad M. Al Shishtawy. Agenda. Introduction. - PowerPoint PPT Presentation
Citation preview
Scientific Computing DepartmentFaculty of Computer and Information SciencesAin Shams UniversitySupervised By:Mohammad F. TolbaMohammad S. Abdel-WahabIsmail A. Taha
Presented By:Ahmad M. Al ShishtawySecurity of Grid Computing Environments
AgendaIntroduction.The Proposed Grid Intrusion Detection Architecture (GIDA).GIDA Implementation.Testing and Results.Conclusions and Future Work.Published Work.
Historical BackgroundMetacomputing.Grid computing coined in the late 1990s.Analogy to the electrical power grid.Ultimate goal:Make access to computational power as easy as access to electrical powerStill under research and development.
The Evolution of the GridPCThe InternetWANLANPCThe GridDistributedComputingClusterThe Internet (Sharing of Information):The Grid (Sharing of Computational Power):
CharacteristicsHeterogeneity.Scalability.Dynamicity or adaptability. Multiple administrative domains and autonomy.
RequirementsA Grid system should:Coordinate resources that are not subject to centralized control.Use standard, open, general-purpose protocols and interfaces.Deliver nontrivial Qualities of Service.
Grid Computing Current Efforts (Sample)Globus:www.globus.orgGridBus:www.gridbus.orgLegion:legion.virginia.eduUNICORE:www.unicore.org
The Grid Project DescriptionJoint project between:Ain Shams University in EgyptGeorge Washington University in USATest Project (Signature Verification).Goals:Understand Grid environments.Hands on practice.Master security related issues.
The Grid Scenario
The Grid Scenario
The Grid Scenario
The Grid Scenario
The Grid Scenario
The Grid Scenario
Basic Grid Services
Security ProblemsThe need to establish security relationship among hundreds of processes .(not simple client/server).The dynamic nature of the grid.Interdomain security solutions must interoperate with the diverse intradomain access control technologies
Security ProblemsBased on Public Key Infrastructure Private Keys can be stolen.Temporary Credentials poorly protectedNo protection from insiders.Software Bugs and Security Holes
Different Security LevelsFirewallPasswordAuthenticationAuthorization......
IntrusionDetectionAttacksFirst LevelSecond LevelProtectedComputerSystem
Intrusion Detection SystemSecond line of defenseNormal differ from malicious use.Data Gathering:Host-based.Network-based.Analysis and Detection:Anomaly detection.Misuse detection.Centralized vs. Distributed detection.
Centralized Intrusion DetectionLANData gathering moduleAnalysis and Detection module
Distributed Intrusion DetectionAnalysis and Detection moduleData gathering module
Hierarchical Distributed Intrusion Detection LANLANLANLANData Analysis ModuleData Gathering ModuleIntrusion Detection Servers...............
AgendaIntroduction.The Proposed Grid Intrusion Detection Architecture (GIDA).GIDA Implementation.Testing and Results.Conclusions and Future Work.Published Work.
GoalProtect Grid resources from attacks that results from installing and using the Grid Infrastructure.Normal Internet attacks (that are not related to the Grid) are the responsibility of the local intrusion detection system at each domain.
Grid Intrusion Detection Architecture
Intrusion Detection Agent (IDA)Data Gathering Module
Intrusion Detection Server (IDS)Analysis and Detection ModuleCooperation Module
Proposed Grid Intrusion Detection Architecture (GIDA)
Data Gathering Module
Proposed Grid Intrusion Detection Architecture (GIDA)GISor DB
GISor DBIDSIDS
Proposed Grid Intrusion Detection Architecture (GIDA)HeterogeneityScalabilityDynamicity or adaptabilityAutonomyNo centralized controlStandard protocolsNontrivial QoS
AgendaIntroduction.The Proposed Grid Intrusion Detection Architecture (GIDA).GIDA Implementation.Testing and Results.Conclusions and Future Work.Published Work.
GIDA ImplementationSimulated Grid environment.Simulated IDA.Host-based anomaly detection technique.Homogeneous IDSs with LVQ Neural Network.Simple cooperation with sharing results.
Why Simulation?No real Grid for testing (Expensive).Best for testing and evaluation new architectures.Control experiments in dynamic environment.
Grid SimulatorsMany Grid simulation tools (GridSim, SimGrid, MicroGrid, ).Unfortunately they concentrate on resource management problems.Develop our own simulator for security and intrusion detection based on GridSim.
The Simulated GridIDSIDSLogLogUsersIntrudersIntrusion Detection ServersGenerated Log Files. . .. . .Resources. . .. . .. . .Requests
GIDA ImplementationIDSIDSIDSPeer-to-peer Network or GISLogLogLog
Why LVQ?Similar to SOM and used for classification.Does not require anomalous records in training data.Classes and their labels (User Name) are known.
IDS Analyzing ModulePreprocessingTrained LVQDecision ModuleCooperation ModuleResponseAnalyzing and detection module
AgendaIntroduction.The Proposed Grid Intrusion Detection Architecture (GIDA).GIDA Implementation.Testing and Results.Conclusions and Future Work.Published Work.
Measured ParametersFalse Positive Percentage.False Negative Percentage.Recognition Rate.Training Time.Detection Duration
Tested IssuesControllable (Internal)Data PreprocessingNumber of IDSsUncontrollable (External)Number of UsersNumber of ResourcesNumber of Intruders
Different Types of Windows(Preprocessing)
Fixed Window Size
Chart2
551.2857
08.5
01.21429
00
00.0714286
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
False Positive
wFixed
Exp Name:wfixed
Description:The effect of increasing the window size
Details:Users:200
Resources:80
IDSs:1, 4
Window:5, 10, 15, 20, 25, 30, 35, 40
Sim Params:
n/a
wSize (1ids)510152025303540
Results:%Recognition1 IDS99.4499.999.9699.9899.98100100
%False Positive1 IDS0000000
%False Negative1 IDS46.666753.3333607076.66678096.6667
MinuetsDetection Duration1 IDS29354046505351
MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12
wSize (4ids)510152025303540
Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51
%False Positive4 IDSs51.28578.51.2142900.0714286000
%False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667
MinuetsDetection Duration4 IDSs1027404443444139
MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17
IDSG
IDSsR
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
wFixed
0000
0000
0000
0000
0000
0000
0000
0000
1 IDS
1 IDS
4 IDSs
4 IDSs
Main Title
wTime
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Minutes
Training Time
wHybrid
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
False Positive
IDSs
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
False Negative
User
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Minutes
Detection Duration
Res
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
Recognition
Intruders
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100
Sim Params:
n/a
wTime (1ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100
%False Positive1 IDS0.2857140.1428570000000000000
%False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100
MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a
MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18
wTime (4ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86
%False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714
%False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760
MinuetsDetection Duration4 IDSs12331218232134274239353839424240
MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Intruders
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Positive
Sheet8
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Negative
Sheet9
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
Recognition
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:
Sim Params:
wHybrid (1ids) W1030060090012001500180021002400
Results:%Recognition1 IDS98.1599.3599.4699.4999.4999.4999.4999.5
%False Positive1 IDS0.07142860000000
%False Negative1 IDS36.666743.333336.666736.666736.666736.666736.666736.6667
MinuetsDetection Duration1 IDS2727273025262525
MinuetsTraining Time1 IDS312289.78286.27286.05286.05285.67319.52285.32
wHybrid (1ids) W2030060090012001500180021002400
Results:%Recognition1 IDS98.2799.7699.999.9599.9699.9899.9799.96
%False Positive1 IDS00000000
%False Negative1 IDS5046.66676053.333366.666763.333363.333366.6667
MinuetsDetection Duration1 IDS2837384134343735
MinuetsTraining Time1 IDS286.47242.9230.2227.55226.3225.77261.07225.3
wHybrid (1ids) W3030060090012001500180021002400
Results:%Recognition1 IDS98.2699.7599.9499.9899.9999.9999.9899.98
%False Positive1 IDS0.07142860000000
%False Negative1 IDS53.333356.66677076.666783.3333808073.3333
MinuetsDetection Duration1 IDS2742505150514752
MinuetsTraining Time1 IDS285.13233.83216.85210.33207.03206.22226.93205.73
wHybrid (4ids) W1030060090012001500180021002400
Results:%Recognition4 IDSs77.9686.689.5791.0891.992.2392.5492.67
%False Positive4 IDSs7534.928621.214314.57141211.42869.59.35714
%False Negative4 IDSs00003.333333.3333303.33%
MinuetsDetection Duration4 IDSs1117242628282830
MinuetsTraining Time4 IDSs69.786158.0956.9656.2755.9664.2255.58
wHybrid (4ids) W2030060090012001500180021002400
Results:%Recognition4 IDSs77.7786.6990.6492.8694.3595.4396.1796.55
%False Positive4 IDSs73.928630.857113.56.928573.928572.214291.142860.857143
%False Negative4 IDSs06.666671023.33332026.666736.666726.6667
MinuetsDetection Duration4 IDSs1222423942414241
MinuetsTraining Time4 IDSs69.459.4455.4753.4952.7251.9658.1556.55
wHybrid (4ids) W3030060090012001500180021002400
Results:%Recognition4 IDSs77.7986.5890.4792.8494.4695.6596.3996.99
%False Positive4 IDSs73.78573013.28575.928572.928571.857140.7857140.571429
%False Negative4 IDSs01023.33333036.666733.333343.333346.6667
MinuetsDetection Duration4 IDSs1220553742444144
MinuetsTraining Time4 IDSs69.3859.4555.4253.3352.251.1557.850.35
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
Recognition
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
Recognition
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
Recognition
Exp Name:IDSs:
Description:The effect of increasing the number of IDSs
Details:Users:200
Resources:80
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
IDSs (50 users)124812162024
Results:%Recognition50 User99.8499.4498.4295.9595.0694.2193.4693.07
%False Positive50 User000.5714293.142865.142860.05714290.07142860.137143
%False Negative50 User86.666756.66675026.666733.3333303026.6667
MinuetsDetection Duration50 User30386452534845
MinuetsTraining Time50 User6.852.620.880.260.140.090.060.06
IDSs (200 users)124812162024
Results:%Recognition200 User99.597.9392.6786.6783.7281.5180.8679.85
%False Positive200 User00.7857149.3571426.071434.428643.546.071447.7857
%False Negative200 User36.6667203.3333306.66667000
MinuetsDetection Duration200 User2532302630232726
MinuetsTraining Time200 User285.82141.8155.2514.355.972.961.921.19
IDSs (350 users)124812162024
Results:%Recognition350 User99.3696.9789.9781.3677.775.0974.5773.32
%False Positive350 User01.3877615.142940.734754.081659.510262.653166.6939
%False Negative350 User403.33333000000
MinuetsDetection Duration350 User2435292622212322
MinuetsTraining Time350 User1650.13826.93337.1881.0132.3215.039.585.93
UsersG
UsersB
UsersR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
IDSs
Percentage
False Positive
000
000
000
000
000
000
000
000
IDSs
Percentage
False Negative
000
000
000
000
000
000
000
000
IDSs
Minutes
Training Time
000
000
000
000
000
000
000
000
IDSs
Minutes
Detection Duration
000
000
000
000
000
000
000
000
IDSs
Percentage
Recognition
Exp Name:Users:
Description:The effect of increasing the number of users
Details:Users:50, 100, 150, 200, 250, 300, 350, 400
Resources:80
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
n/a
Users (1 IDS)50100150200250300350400
Results:%Recognition1 IDS99.8499.7899.6499.599.4399.3299.36
%False Positive1 IDS0000000
%False Negative1 IDS86.666773.333376.666736.666776.666766.666790
MinutesDetection Duration1 IDS31304025252624
MinutesTraining Time1 IDS6.939.77119.92285.68569.021020.071706.37
Users (4 IDS)50100150200250300350400
Results:%Recognition4 IDS98.4295.9195.0292.6791.6290.2589.9588.69
%False Positive4 IDS0.5714293.142862.476199.3571411.714316.142915.265319.7857
%False Negative4 IDS5033.3333303.3333320103.333336.66667
MinutesDetection Duration4 IDS6442333031273031
MinutesTraining Time4 IDS0.856.8520.5655.23112.76198.1346.12536.91
Users (8 IDS)50100150200250300350400
Results:%Recognition8 IDS95.9592.5188.5486.6785.3782.2581.3679.98
%False Positive8 IDS3.142868.4285718.571426.071428.114339.238140.734745.0714
%False Negative8 IDS26.666716.666716.6667013.33331000
MinutesDetection Duration8 IDS5328332728242718
MinutesTraining Time8 IDS0.261.775.8914.329.5649.7682.63126.37
IDSG
IDSsB
IDSsR
50 Users
200 Users
Legend
350 Users
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Users
Percentage
False Positive
000
000
000
000
000
000
000
000
Users
Percentage
False Negative
000
000
000
000
000
000
000
000
Users
Minutes
Training Time
000
000
000
000
000
000
000
000
Users
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Users
Percentage
Recognition
Exp Name:Resources
Description:The effect of increasing the number of resources
Details:Users:200
Resources:20, 40, 60, 80, 100, 120, 140, 160
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
Res (1 IDS)20406080100120140160
Results:%Recognition1 IDS71.7197.8999.1599.599.6599.7599.6799.68
%False Positive1 IDS46.21430.4285710.071428600000
%False Negative1 IDS13.333343.333366.666736.66677056.66677053.3333
MinuetsDetection Duration1 IDS1520222641272928
MinuetsTraining Time1 IDS133.23163.25216.45285.95361.87441.22546.48641.27
Res (4 IDSs)20406080100120140160
Results:%Recognition4 IDSs54.8279.0987.592.6796.3497.498.0698.78
%False Positive4 IDSs78.214344.214322.35719.357141.714290.6428570.4285710
%False Negative4 IDSs3.3333306.666673.333331013.333313.333316.6667
MinuetsDetection Duration4 IDSs2217263034313535
MinuetsTraining Time4 IDSs4.9916.4434.2555.2371.1386.25103.24111.88
Res (8 IDSs)20406080100120140160
Results:%Recognition8 IDSs50.8771.9779.286.6791.2993.1394.8895.81
%False Positive8 IDSs7860.714345.428626.07149.571437.428573.928572.35714
%False Negative8 IDSs006.666670106.6666713.333310
MinuetsDetection Duration8 IDSs1213222726323836
MinuetsTraining Time8 IDSs1.053.28.314.3221.6129.6539.0545.53
IDSG
IDSsB
IDSsR
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Resources
Percentage
False Positive
000
000
000
000
000
000
000
000
Resources
Percentage
False Negative
000
000
000
000
000
000
000
000
Resources
Minutes
Training Time
000
000
000
000
000
000
000
000
Resources
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Resources
Percentage
Recognition
Exp Name:Intruders
Description:The effect of increasing the number of intruders
Details:Users:200
Resources:80
IDSs:1, 4, 8
Window:(10, 2400)
Sim Params:
Intruders (1 IDS)510152025303540
Results:%Recognition1 IDS99.599.599.5599.5599.5399.599.599.56
%False Positive1 IDS00000000
%False Negative1 IDS46.666736.666786.666776.66677661.111176.190583.3333
MinuetsDetection Duration1 IDS3625302824253552
MinuetsTraining Time1 IDS278.05285.52282.3280.32281.6283.62292.25276.32
Intruders (4 IDS)510152025303540
Results:%Recognition4 IDSs92.7392.6793.2393.0792.9392.8792.9193.72
%False Positive4 IDSs8.071439.357146.2857188.428576.857147.642866.85714
%False Negative4 IDSs03.3333324.444411.666718.666722.222233.333330
MinuetsDetection Duration4 IDSs3030292830282847
MinuetsTraining Time4 IDSs52.3455.251.8354.7554.8754.5355.9150.02
Intruders (1 IDS)510152025303540
Results:%Recognition8 IDSs86.0186.6786.9586.9586.1386.2585.586.71
%False Positive8 IDSs27.071426.07142623.571425.714326.285728.642925.3571
%False Negative8 IDSs6.6666704.44444513.33338.8888914.285714.1667
MinuetsDetection Duration8 IDSs5427262427252830
MinuetsTraining Time8 IDSs13.0314.3313.3915.1315.2314.2215.113.6
IDSG
IDSsB
IDSsR
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Intruders
Percentage
False Positive
000
000
000
000
000
000
000
000
Intruders
Percentage
False Negative
000
000
000
000
000
000
000
000
Intruders
Minutes
Training Time
000
000
000
000
000
000
000
000
Intruders
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Intruders
Percentage
Recognition
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
IDSs
Percentage
False Positive
000
000
000
000
000
000
000
000
IDSs
Percentage
False Negative
000
000
000
000
000
000
000
000
IDSs
Minutes
Training Time
000
000
000
000
000
000
000
000
Resources
Percentage
False Positive
000
000
000
000
000
000
000
000
Users
Minutes
Training Time
000
000
000
000
000
000
000
000
Intruders
Percentage
False Negative
both
IDSs14W10W10900900
9009001010900900
Recognition99.4689.5799.4492.6699.9190.4
False Positive021.214308.5013.2857
False Negative36.6667046.66676.666677020
Detection Duration272429275342
Training Time286.2758.09288.0354.82211.2255.2
12001200202012001200
Recognition99.9592.8699.9697.5399.9792.72
False Positive06.928570005.85714
False Negative53.333323.33336066.666710030
Detection Duration41394044n/a38
Training Time227.5553.49227.2249.49198.8853.05
6006001010600600
Recognition99.3586.699.4492.6699.7386.61
False Positive034.928608.5030
False Negative43.3333046.66676.6666763.333310
Detection Duration271729274021
Training Time289.7861288.0354.8223159.25
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Chart5
582.67
99.4492.66
99.996.09
99.9697.53
99.9898.55
99.9899.03
10099.27
10099.51
1 IDS
4 IDSs
Window Size
Percentage
Recognition
wFixed
Exp Name:wfixed
Description:The effect of increasing the window size
Details:Users:200
Resources:80
IDSs:1, 4
Window:5, 10, 15, 20, 25, 30, 35, 40
Sim Params:
n/a
wSize (1ids)510152025303540
Results:%Recognition1 IDS99.4499.999.9699.9899.98100100
%False Positive1 IDS0000000
%False Negative1 IDS46.666753.3333607076.66678096.6667
MinuetsDetection Duration1 IDS29354046505351
MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12
wSize (4ids)510152025303540
Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51
%False Positive4 IDSs51.28578.51.2142900.0714286000
%False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667
MinuetsDetection Duration4 IDSs1027404443444139
MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17
IDSG
IDSsR
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
wFixed
1 IDS
1 IDS
4 IDSs
4 IDSs
Main Title
wTime
1 IDS
4 IDSs
Window Size
Minutes
Training Time
wHybrid
1 IDS
4 IDSs
Window Size
Percentage
False Positive
IDSs
1 IDS
4 IDSs
Window Size
Percentage
False Negative
User
1 IDS
4 IDSs
Window Size
Minutes
Detection Duration
Res
1 IDS
4 IDSs
Window Size
Percentage
Recognition
Intruders
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100
Sim Params:
n/a
wTime (1ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100
%False Positive1 IDS0.2857140.1428570000000000000
%False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100
MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a
MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18
wTime (4ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86
%False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714
%False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760
MinuetsDetection Duration4 IDSs12331218232134274239353839424240
MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Intruders
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Positive
Sheet8
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Negative
Sheet9
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
Recognition
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:
Sim Params:
wHybrid (1ids) W1030060090012001500180021002400
Results:%Recognition1 IDS98.1599.3599.4699.4999.4999.4999.4999.5
%False Positive1 IDS0.07142860000000
%False Negative1 IDS36.666743.333336.666736.666736.666736.666736.666736.6667
MinuetsDetection Duration1 IDS2727273025262525
MinuetsTraining Time1 IDS312289.78286.27286.05286.05285.67319.52285.32
wHybrid (1ids) W2030060090012001500180021002400
Results:%Recognition1 IDS98.2799.7699.999.9599.9699.9899.9799.96
%False Positive1 IDS00000000
%False Negative1 IDS5046.66676053.333366.666763.333363.333366.6667
MinuetsDetection Duration1 IDS2837384134343735
MinuetsTraining Time1 IDS286.47242.9230.2227.55226.3225.77261.07225.3
wHybrid (1ids) W3030060090012001500180021002400
Results:%Recognition1 IDS98.2699.7599.9499.9899.9999.9999.9899.98
%False Positive1 IDS0.07142860000000
%False Negative1 IDS53.333356.66677076.666783.3333808073.3333
MinuetsDetection Duration1 IDS2742505150514752
MinuetsTraining Time1 IDS285.13233.83216.85210.33207.03206.22226.93205.73
wHybrid (4ids) W1030060090012001500180021002400
Results:%Recognition4 IDSs77.9686.689.5791.0891.992.2392.5492.67
%False Positive4 IDSs7534.928621.214314.57141211.42869.59.35714
%False Negative4 IDSs00003.333333.3333303.33%
MinuetsDetection Duration4 IDSs1117242628282830
MinuetsTraining Time4 IDSs69.786158.0956.9656.2755.9664.2255.58
wHybrid (4ids) W2030060090012001500180021002400
Results:%Recognition4 IDSs77.7786.6990.6492.8694.3595.4396.1796.55
%False Positive4 IDSs73.928630.857113.56.928573.928572.214291.142860.857143
%False Negative4 IDSs06.666671023.33332026.666736.666726.6667
MinuetsDetection Duration4 IDSs1222423942414241
MinuetsTraining Time4 IDSs69.459.4455.4753.4952.7251.9658.1556.55
wHybrid (4ids) W3030060090012001500180021002400
Results:%Recognition4 IDSs77.7986.5890.4792.8494.4695.6596.3996.99
%False Positive4 IDSs73.78573013.28575.928572.928571.857140.7857140.571429
%False Negative4 IDSs01023.33333036.666733.333343.333346.6667
MinuetsDetection Duration4 IDSs1220553742444144
MinuetsTraining Time4 IDSs69.3859.4555.4253.3352.251.1557.850.35
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
Recognition
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
Recognition
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
Recognition
Exp Name:IDSs:
Description:The effect of increasing the number of IDSs
Details:Users:200
Resources:80
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
IDSs (50 users)124812162024
Results:%Recognition50 User99.8499.4498.4295.9595.0694.2193.4693.07
%False Positive50 User000.5714293.142865.142860.05714290.07142860.137143
%False Negative50 User86.666756.66675026.666733.3333303026.6667
MinuetsDetection Duration50 User30386452534845
MinuetsTraining Time50 User6.852.620.880.260.140.090.060.06
IDSs (200 users)124812162024
Results:%Recognition200 User99.597.9392.6786.6783.7281.5180.8679.85
%False Positive200 User00.7857149.3571426.071434.428643.546.071447.7857
%False Negative200 User36.6667203.3333306.66667000
MinuetsDetection Duration200 User2532302630232726
MinuetsTraining Time200 User285.82141.8155.2514.355.972.961.921.19
IDSs (350 users)124812162024
Results:%Recognition350 User99.3696.9789.9781.3677.775.0974.5773.32
%False Positive350 User01.3877615.142940.734754.081659.510262.653166.6939
%False Negative350 User403.33333000000
MinuetsDetection Duration350 User2435292622212322
MinuetsTraining Time350 User1650.13826.93337.1881.0132.3215.039.585.93
UsersG
UsersB
UsersR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
IDSs
Percentage
False Positive
000
000
000
000
000
000
000
000
IDSs
Percentage
False Negative
000
000
000
000
000
000
000
000
IDSs
Minutes
Training Time
000
000
000
000
000
000
000
000
IDSs
Minutes
Detection Duration
000
000
000
000
000
000
000
000
IDSs
Percentage
Recognition
Exp Name:Users:
Description:The effect of increasing the number of users
Details:Users:50, 100, 150, 200, 250, 300, 350, 400
Resources:80
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
n/a
Users (1 IDS)50100150200250300350400
Results:%Recognition1 IDS99.8499.7899.6499.599.4399.3299.36
%False Positive1 IDS0000000
%False Negative1 IDS86.666773.333376.666736.666776.666766.666790
MinutesDetection Duration1 IDS31304025252624
MinutesTraining Time1 IDS6.939.77119.92285.68569.021020.071706.37
Users (4 IDS)50100150200250300350400
Results:%Recognition4 IDS98.4295.9195.0292.6791.6290.2589.9588.69
%False Positive4 IDS0.5714293.142862.476199.3571411.714316.142915.265319.7857
%False Negative4 IDS5033.3333303.3333320103.333336.66667
MinutesDetection Duration4 IDS6442333031273031
MinutesTraining Time4 IDS0.856.8520.5655.23112.76198.1346.12536.91
Users (8 IDS)50100150200250300350400
Results:%Recognition8 IDS95.9592.5188.5486.6785.3782.2581.3679.98
%False Positive8 IDS3.142868.4285718.571426.071428.114339.238140.734745.0714
%False Negative8 IDS26.666716.666716.6667013.33331000
MinutesDetection Duration8 IDS5328332728242718
MinutesTraining Time8 IDS0.261.775.8914.329.5649.7682.63126.37
IDSG
IDSsB
IDSsR
50 Users
200 Users
Legend
350 Users
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Users
Percentage
False Positive
000
000
000
000
000
000
000
000
Users
Percentage
False Negative
000
000
000
000
000
000
000
000
Users
Minutes
Training Time
000
000
000
000
000
000
000
000
Users
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Users
Percentage
Recognition
Exp Name:Resources
Description:The effect of increasing the number of resources
Details:Users:200
Resources:20, 40, 60, 80, 100, 120, 140, 160
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
Res (1 IDS)20406080100120140160
Results:%Recognition1 IDS71.7197.8999.1599.599.6599.7599.6799.68
%False Positive1 IDS46.21430.4285710.071428600000
%False Negative1 IDS13.333343.333366.666736.66677056.66677053.3333
MinuetsDetection Duration1 IDS1520222641272928
MinuetsTraining Time1 IDS133.23163.25216.45285.95361.87441.22546.48641.27
Res (4 IDSs)20406080100120140160
Results:%Recognition4 IDSs54.8279.0987.592.6796.3497.498.0698.78
%False Positive4 IDSs78.214344.214322.35719.357141.714290.6428570.4285710
%False Negative4 IDSs3.3333306.666673.333331013.333313.333316.6667
MinuetsDetection Duration4 IDSs2217263034313535
MinuetsTraining Time4 IDSs4.9916.4434.2555.2371.1386.25103.24111.88
Res (8 IDSs)20406080100120140160
Results:%Recognition8 IDSs50.8771.9779.286.6791.2993.1394.8895.81
%False Positive8 IDSs7860.714345.428626.07149.571437.428573.928572.35714
%False Negative8 IDSs006.666670106.6666713.333310
MinuetsDetection Duration8 IDSs1213222726323836
MinuetsTraining Time8 IDSs1.053.28.314.3221.6129.6539.0545.53
IDSG
IDSsB
IDSsR
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Resources
Percentage
False Positive
000
000
000
000
000
000
000
000
Resources
Percentage
False Negative
000
000
000
000
000
000
000
000
Resources
Minutes
Training Time
000
000
000
000
000
000
000
000
Resources
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Resources
Percentage
Recognition
Exp Name:Intruders
Description:The effect of increasing the number of intruders
Details:Users:200
Resources:80
IDSs:1, 4, 8
Window:(10, 2400)
Sim Params:
Intruders (1 IDS)510152025303540
Results:%Recognition1 IDS99.599.599.5599.5599.5399.599.599.56
%False Positive1 IDS00000000
%False Negative1 IDS46.666736.666786.666776.66677661.111176.190583.3333
MinuetsDetection Duration1 IDS3625302824253552
MinuetsTraining Time1 IDS278.05285.52282.3280.32281.6283.62292.25276.32
Intruders (4 IDS)510152025303540
Results:%Recognition4 IDSs92.7392.6793.2393.0792.9392.8792.9193.72
%False Positive4 IDSs8.071439.357146.2857188.428576.857147.642866.85714
%False Negative4 IDSs03.3333324.444411.666718.666722.222233.333330
MinuetsDetection Duration4 IDSs3030292830282847
MinuetsTraining Time4 IDSs52.3455.251.8354.7554.8754.5355.9150.02
Intruders (1 IDS)510152025303540
Results:%Recognition8 IDSs86.0186.6786.9586.9586.1386.2585.586.71
%False Positive8 IDSs27.071426.07142623.571425.714326.285728.642925.3571
%False Negative8 IDSs6.6666704.44444513.33338.8888914.285714.1667
MinuetsDetection Duration8 IDSs5427262427252830
MinuetsTraining Time8 IDSs13.0314.3313.3915.1315.2314.2215.113.6
IDSG
IDSsB
IDSsR
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Intruders
Percentage
False Positive
000
000
000
000
000
000
000
000
Intruders
Percentage
False Negative
000
000
000
000
000
000
000
000
Intruders
Minutes
Training Time
000
000
000
000
000
000
000
000
Intruders
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Intruders
Percentage
Recognition
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
IDSs
Percentage
False Positive
000
000
000
000
000
000
000
000
IDSs
Percentage
False Negative
000
000
000
000
000
000
000
000
IDSs
Minutes
Training Time
000
000
000
000
000
000
000
000
Resources
Percentage
False Positive
000
000
000
000
000
000
000
000
Users
Minutes
Training Time
000
000
000
000
000
000
000
000
Intruders
Percentage
False Negative
both
IDSs14W10W10900900
9009001010900900
Recognition99.4689.5799.4492.6699.9190.4
False Positive021.214308.5013.2857
False Negative36.6667046.66676.666677020
Detection Duration272429275342
Training Time286.2758.09288.0354.82211.2255.2
12001200202012001200
Recognition99.9592.8699.9697.5399.9792.72
False Positive06.928570005.85714
False Negative53.333323.33336066.666710030
Detection Duration41394044n/a38
Training Time227.5553.49227.2249.49198.8853.05
6006001010600600
Recognition99.3586.699.4492.6699.7386.61
False Positive034.928608.5030
False Negative43.3333046.66676.6666763.333310
Detection Duration271729274021
Training Time289.7861288.0354.8223159.25
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Chart1
566.13
288.0354.82
247.5551.17
227.2249.49
214.8348.5
206.5248
206.1348.99
196.1247.17
1 IDS
4 IDSs
Window Size
Minutes
Training Time
wFixed
Exp Name:wfixed
Description:The effect of increasing the window size
Details:Users:200
Resources:80
IDSs:1, 4
Window:5, 10, 15, 20, 25, 30, 35, 40
Sim Params:
n/a
wSize (1ids)510152025303540
Results:%Recognition1 IDS99.4499.999.9699.9899.98100100
%False Positive1 IDS0000000
%False Negative1 IDS46.666753.3333607076.66678096.6667
MinuetsDetection Duration1 IDS29354046505351
MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12
wSize (4ids)510152025303540
Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51
%False Positive4 IDSs51.28578.51.2142900.0714286000
%False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667
MinuetsDetection Duration4 IDSs1027404443444139
MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17
IDSG
IDSsR
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
wFixed
0000
0000
0000
0000
0000
0000
0000
0000
1 IDS
1 IDS
4 IDSs
4 IDSs
Main Title
wTime
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Minutes
Training Time
wHybrid
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
False Positive
IDSs
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
False Negative
User
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Minutes
Detection Duration
Res
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
Recognition
Intruders
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100
Sim Params:
n/a
wTime (1ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100
%False Positive1 IDS0.2857140.1428570000000000000
%False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100
MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a
MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18
wTime (4ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86
%False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714
%False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760
MinuetsDetection Duration4 IDSs12331218232134274239353839424240
MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Intruders
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Positive
Sheet8
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Negative
Sheet9
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
Recognition
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:
Sim Params:
wHybrid (1ids) W1030060090012001500180021002400
Results:%Recognition1 IDS98.1599.3599.4699.4999.4999.4999.4999.5
%False Positive1 IDS0.07142860000000
%False Negative1 IDS36.666743.333336.666736.666736.666736.666736.666736.6667
MinuetsDetection Duration1 IDS2727273025262525
MinuetsTraining Time1 IDS312289.78286.27286.05286.05285.67319.52285.32
wHybrid (1ids) W2030060090012001500180021002400
Results:%Recognition1 IDS98.2799.7699.999.9599.9699.9899.9799.96
%False Positive1 IDS00000000
%False Negative1 IDS5046.66676053.333366.666763.333363.333366.6667
MinuetsDetection Duration1 IDS2837384134343735
MinuetsTraining Time1 IDS286.47242.9230.2227.55226.3225.77261.07225.3
wHybrid (1ids) W3030060090012001500180021002400
Results:%Recognition1 IDS98.2699.7599.9499.9899.9999.9999.9899.98
%False Positive1 IDS0.07142860000000
%False Negative1 IDS53.333356.66677076.666783.3333808073.3333
MinuetsDetection Duration1 IDS2742505150514752
MinuetsTraining Time1 IDS285.13233.83216.85210.33207.03206.22226.93205.73
wHybrid (4ids) W1030060090012001500180021002400
Results:%Recognition4 IDSs77.9686.689.5791.0891.992.2392.5492.67
%False Positive4 IDSs7534.928621.214314.57141211.42869.59.35714
%False Negative4 IDSs00003.333333.3333303.33%
MinuetsDetection Duration4 IDSs1117242628282830
MinuetsTraining Time4 IDSs69.786158.0956.9656.2755.9664.2255.58
wHybrid (4ids) W2030060090012001500180021002400
Results:%Recognition4 IDSs77.7786.6990.6492.8694.3595.4396.1796.55
%False Positive4 IDSs73.928630.857113.56.928573.928572.214291.142860.857143
%False Negative4 IDSs06.666671023.33332026.666736.666726.6667
MinuetsDetection Duration4 IDSs1222423942414241
MinuetsTraining Time4 IDSs69.459.4455.4753.4952.7251.9658.1556.55
wHybrid (4ids) W3030060090012001500180021002400
Results:%Recognition4 IDSs77.7986.5890.4792.8494.4695.6596.3996.99
%False Positive4 IDSs73.78573013.28575.928572.928571.857140.7857140.571429
%False Negative4 IDSs01023.33333036.666733.333343.333346.6667
MinuetsDetection Duration4 IDSs1220553742444144
MinuetsTraining Time4 IDSs69.3859.4555.4253.3352.251.1557.850.35
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
Recognition
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
Recognition
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
Recognition
Exp Name:IDSs:
Description:The effect of increasing the number of IDSs
Details:Users:200
Resources:80
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
IDSs (50 users)124812162024
Results:%Recognition50 User99.8499.4498.4295.9595.0694.2193.4693.07
%False Positive50 User000.5714293.142865.142860.05714290.07142860.137143
%False Negative50 User86.666756.66675026.666733.3333303026.6667
MinuetsDetection Duration50 User30386452534845
MinuetsTraining Time50 User6.852.620.880.260.140.090.060.06
IDSs (200 users)124812162024
Results:%Recognition200 User99.597.9392.6786.6783.7281.5180.8679.85
%False Positive200 User00.7857149.3571426.071434.428643.546.071447.7857
%False Negative200 User36.6667203.3333306.66667000
MinuetsDetection Duration200 User2532302630232726
MinuetsTraining Time200 User285.82141.8155.2514.355.972.961.921.19
IDSs (350 users)124812162024
Results:%Recognition350 User99.3696.9789.9781.3677.775.0974.5773.32
%False Positive350 User01.3877615.142940.734754.081659.510262.653166.6939
%False Negative350 User403.33333000000
MinuetsDetection Duration350 User2435292622212322
MinuetsTraining Time350 User1650.13826.93337.1881.0132.3215.039.585.93
UsersG
UsersB
UsersR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
IDSs
Percentage
False Positive
000
000
000
000
000
000
000
000
IDSs
Percentage
False Negative
000
000
000
000
000
000
000
000
IDSs
Minutes
Training Time
000
000
000
000
000
000
000
000
IDSs
Minutes
Detection Duration
000
000
000
000
000
000
000
000
IDSs
Percentage
Recognition
Exp Name:Users:
Description:The effect of increasing the number of users
Details:Users:50, 100, 150, 200, 250, 300, 350, 400
Resources:80
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
n/a
Users (1 IDS)50100150200250300350400
Results:%Recognition1 IDS99.8499.7899.6499.599.4399.3299.36
%False Positive1 IDS0000000
%False Negative1 IDS86.666773.333376.666736.666776.666766.666790
MinutesDetection Duration1 IDS31304025252624
MinutesTraining Time1 IDS6.939.77119.92285.68569.021020.071706.37
Users (4 IDS)50100150200250300350400
Results:%Recognition4 IDS98.4295.9195.0292.6791.6290.2589.9588.69
%False Positive4 IDS0.5714293.142862.476199.3571411.714316.142915.265319.7857
%False Negative4 IDS5033.3333303.3333320103.333336.66667
MinutesDetection Duration4 IDS6442333031273031
MinutesTraining Time4 IDS0.856.8520.5655.23112.76198.1346.12536.91
Users (8 IDS)50100150200250300350400
Results:%Recognition8 IDS95.9592.5188.5486.6785.3782.2581.3679.98
%False Positive8 IDS3.142868.4285718.571426.071428.114339.238140.734745.0714
%False Negative8 IDS26.666716.666716.6667013.33331000
MinutesDetection Duration8 IDS5328332728242718
MinutesTraining Time8 IDS0.261.775.8914.329.5649.7682.63126.37
IDSG
IDSsB
IDSsR
50 Users
200 Users
Legend
350 Users
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Users
Percentage
False Positive
000
000
000
000
000
000
000
000
Users
Percentage
False Negative
000
000
000
000
000
000
000
000
Users
Minutes
Training Time
000
000
000
000
000
000
000
000
Users
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Users
Percentage
Recognition
Exp Name:Resources
Description:The effect of increasing the number of resources
Details:Users:200
Resources:20, 40, 60, 80, 100, 120, 140, 160
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
Res (1 IDS)20406080100120140160
Results:%Recognition1 IDS71.7197.8999.1599.599.6599.7599.6799.68
%False Positive1 IDS46.21430.4285710.071428600000
%False Negative1 IDS13.333343.333366.666736.66677056.66677053.3333
MinuetsDetection Duration1 IDS1520222641272928
MinuetsTraining Time1 IDS133.23163.25216.45285.95361.87441.22546.48641.27
Res (4 IDSs)20406080100120140160
Results:%Recognition4 IDSs54.8279.0987.592.6796.3497.498.0698.78
%False Positive4 IDSs78.214344.214322.35719.357141.714290.6428570.4285710
%False Negative4 IDSs3.3333306.666673.333331013.333313.333316.6667
MinuetsDetection Duration4 IDSs2217263034313535
MinuetsTraining Time4 IDSs4.9916.4434.2555.2371.1386.25103.24111.88
Res (8 IDSs)20406080100120140160
Results:%Recognition8 IDSs50.8771.9779.286.6791.2993.1394.8895.81
%False Positive8 IDSs7860.714345.428626.07149.571437.428573.928572.35714
%False Negative8 IDSs006.666670106.6666713.333310
MinuetsDetection Duration8 IDSs1213222726323836
MinuetsTraining Time8 IDSs1.053.28.314.3221.6129.6539.0545.53
IDSG
IDSsB
IDSsR
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Resources
Percentage
False Positive
000
000
000
000
000
000
000
000
Resources
Percentage
False Negative
000
000
000
000
000
000
000
000
Resources
Minutes
Training Time
000
000
000
000
000
000
000
000
Resources
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Resources
Percentage
Recognition
Exp Name:Intruders
Description:The effect of increasing the number of intruders
Details:Users:200
Resources:80
IDSs:1, 4, 8
Window:(10, 2400)
Sim Params:
Intruders (1 IDS)510152025303540
Results:%Recognition1 IDS99.599.599.5599.5599.5399.599.599.56
%False Positive1 IDS00000000
%False Negative1 IDS46.666736.666786.666776.66677661.111176.190583.3333
MinuetsDetection Duration1 IDS3625302824253552
MinuetsTraining Time1 IDS278.05285.52282.3280.32281.6283.62292.25276.32
Intruders (4 IDS)510152025303540
Results:%Recognition4 IDSs92.7392.6793.2393.0792.9392.8792.9193.72
%False Positive4 IDSs8.071439.357146.2857188.428576.857147.642866.85714
%False Negative4 IDSs03.3333324.444411.666718.666722.222233.333330
MinuetsDetection Duration4 IDSs3030292830282847
MinuetsTraining Time4 IDSs52.3455.251.8354.7554.8754.5355.9150.02
Intruders (1 IDS)510152025303540
Results:%Recognition8 IDSs86.0186.6786.9586.9586.1386.2585.586.71
%False Positive8 IDSs27.071426.07142623.571425.714326.285728.642925.3571
%False Negative8 IDSs6.6666704.44444513.33338.8888914.285714.1667
MinuetsDetection Duration8 IDSs5427262427252830
MinuetsTraining Time8 IDSs13.0314.3313.3915.1315.2314.2215.113.6
IDSG
IDSsB
IDSsR
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Intruders
Percentage
False Positive
000
000
000
000
000
000
000
000
Intruders
Percentage
False Negative
000
000
000
000
000
000
000
000
Intruders
Minutes
Training Time
000
000
000
000
000
000
000
000
Intruders
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Intruders
Percentage
Recognition
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
IDSs
Percentage
False Positive
000
000
000
000
000
000
000
000
IDSs
Percentage
False Negative
000
000
000
000
000
000
000
000
IDSs
Minutes
Training Time
000
000
000
000
000
000
000
000
Resources
Percentage
False Positive
000
000
000
000
000
000
000
000
Users
Minutes
Training Time
000
000
000
000
000
000
000
000
Intruders
Percentage
False Negative
both
IDSs14W10W10900900
9009001010900900
Recognition99.4689.5799.4492.6699.9190.4
False Positive021.214308.5013.2857
False Negative36.6667046.66676.666677020
Detection Duration272429275342
Training Time286.2758.09288.0354.82211.2255.2
12001200202012001200
Recognition99.9592.8699.9697.5399.9792.72
False Positive06.928570005.85714
False Negative53.333323.33336066.666710030
Detection Duration41394044n/a38
Training Time227.5553.49227.2249.49198.8853.05
6006001010600600
Recognition99.3586.699.4492.6699.7386.61
False Positive034.928608.5030
False Negative43.3333046.66676.6666763.333310
Detection Duration271729274021
Training Time289.7861288.0354.8223159.25
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Chart3
50
46.66676.66667
53.333333.3333
6066.6667
7076.6667
76.666790
8086.6667
96.666796.6667
1 IDS
4 IDSs
Window Size
Percentage
False Negative
wFixed
Exp Name:wfixed
Description:The effect of increasing the window size
Details:Users:200
Resources:80
IDSs:1, 4
Window:5, 10, 15, 20, 25, 30, 35, 40
Sim Params:
n/a
wSize (1ids)510152025303540
Results:%Recognition1 IDS99.4499.999.9699.9899.98100100
%False Positive1 IDS0000000
%False Negative1 IDS46.666753.3333607076.66678096.6667
MinuetsDetection Duration1 IDS29354046505351
MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12
wSize (4ids)510152025303540
Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51
%False Positive4 IDSs51.28578.51.2142900.0714286000
%False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667
MinuetsDetection Duration4 IDSs1027404443444139
MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17
IDSG
IDSsR
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
wFixed
0000
0000
0000
0000
0000
0000
0000
0000
1 IDS
1 IDS
4 IDSs
4 IDSs
Main Title
wTime
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Minutes
Training Time
wHybrid
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
False Positive
IDSs
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
False Negative
User
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Minutes
Detection Duration
Res
00
00
00
00
00
00
00
00
1 IDS
4 IDSs
Window Size
Percentage
Recognition
Intruders
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100
Sim Params:
n/a
wTime (1ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100
%False Positive1 IDS0.2857140.1428570000000000000
%False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100
MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a
MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18
wTime (4ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86
%False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714
%False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760
MinuetsDetection Duration4 IDSs12331218232134274239353839424240
MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Intruders
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Positive
Sheet8
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Negative
Sheet9
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
Recognition
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:
Sim Params:
wHybrid (1ids) W1030060090012001500180021002400
Results:%Recognition1 IDS98.1599.3599.4699.4999.4999.4999.4999.5
%False Positive1 IDS0.07142860000000
%False Negative1 IDS36.666743.333336.666736.666736.666736.666736.666736.6667
MinuetsDetection Duration1 IDS2727273025262525
MinuetsTraining Time1 IDS312289.78286.27286.05286.05285.67319.52285.32
wHybrid (1ids) W2030060090012001500180021002400
Results:%Recognition1 IDS98.2799.7699.999.9599.9699.9899.9799.96
%False Positive1 IDS00000000
%False Negative1 IDS5046.66676053.333366.666763.333363.333366.6667
MinuetsDetection Duration1 IDS2837384134343735
MinuetsTraining Time1 IDS286.47242.9230.2227.55226.3225.77261.07225.3
wHybrid (1ids) W3030060090012001500180021002400
Results:%Recognition1 IDS98.2699.7599.9499.9899.9999.9999.9899.98
%False Positive1 IDS0.07142860000000
%False Negative1 IDS53.333356.66677076.666783.3333808073.3333
MinuetsDetection Duration1 IDS2742505150514752
MinuetsTraining Time1 IDS285.13233.83216.85210.33207.03206.22226.93205.73
wHybrid (4ids) W1030060090012001500180021002400
Results:%Recognition4 IDSs77.9686.689.5791.0891.992.2392.5492.67
%False Positive4 IDSs7534.928621.214314.57141211.42869.59.35714
%False Negative4 IDSs00003.333333.3333303.33%
MinuetsDetection Duration4 IDSs1117242628282830
MinuetsTraining Time4 IDSs69.786158.0956.9656.2755.9664.2255.58
wHybrid (4ids) W2030060090012001500180021002400
Results:%Recognition4 IDSs77.7786.6990.6492.8694.3595.4396.1796.55
%False Positive4 IDSs73.928630.857113.56.928573.928572.214291.142860.857143
%False Negative4 IDSs06.666671023.33332026.666736.666726.6667
MinuetsDetection Duration4 IDSs1222423942414241
MinuetsTraining Time4 IDSs69.459.4455.4753.4952.7251.9658.1556.55
wHybrid (4ids) W3030060090012001500180021002400
Results:%Recognition4 IDSs77.7986.5890.4792.8494.4695.6596.3996.99
%False Positive4 IDSs73.78573013.28575.928572.928571.857140.7857140.571429
%False Negative4 IDSs01023.33333036.666733.333343.333346.6667
MinuetsDetection Duration4 IDSs1220553742444144
MinuetsTraining Time4 IDSs69.3859.4555.4253.3352.251.1557.850.35
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 10 (Sec.)
Percentage
Recognition
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 20 (Sec.)
Percentage
Recognition
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
False Positive
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
False Negative
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
Window Length at Size 30 (Sec.)
Percentage
Recognition
Exp Name:IDSs:
Description:The effect of increasing the number of IDSs
Details:Users:200
Resources:80
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
IDSs (50 users)124812162024
Results:%Recognition50 User99.8499.4498.4295.9595.0694.2193.4693.07
%False Positive50 User000.5714293.142865.142860.05714290.07142860.137143
%False Negative50 User86.666756.66675026.666733.3333303026.6667
MinuetsDetection Duration50 User30386452534845
MinuetsTraining Time50 User6.852.620.880.260.140.090.060.06
IDSs (200 users)124812162024
Results:%Recognition200 User99.597.9392.6786.6783.7281.5180.8679.85
%False Positive200 User00.7857149.3571426.071434.428643.546.071447.7857
%False Negative200 User36.6667203.3333306.66667000
MinuetsDetection Duration200 User2532302630232726
MinuetsTraining Time200 User285.82141.8155.2514.355.972.961.921.19
IDSs (350 users)124812162024
Results:%Recognition350 User99.3696.9789.9781.3677.775.0974.5773.32
%False Positive350 User01.3877615.142940.734754.081659.510262.653166.6939
%False Negative350 User403.33333000000
MinuetsDetection Duration350 User2435292622212322
MinuetsTraining Time350 User1650.13826.93337.1881.0132.3215.039.585.93
UsersG
UsersB
UsersR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
IDSs
Percentage
False Positive
000
000
000
000
000
000
000
000
IDSs
Percentage
False Negative
000
000
000
000
000
000
000
000
IDSs
Minutes
Training Time
000
000
000
000
000
000
000
000
IDSs
Minutes
Detection Duration
000
000
000
000
000
000
000
000
IDSs
Percentage
Recognition
Exp Name:Users:
Description:The effect of increasing the number of users
Details:Users:50, 100, 150, 200, 250, 300, 350, 400
Resources:80
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
n/a
Users (1 IDS)50100150200250300350400
Results:%Recognition1 IDS99.8499.7899.6499.599.4399.3299.36
%False Positive1 IDS0000000
%False Negative1 IDS86.666773.333376.666736.666776.666766.666790
MinutesDetection Duration1 IDS31304025252624
MinutesTraining Time1 IDS6.939.77119.92285.68569.021020.071706.37
Users (4 IDS)50100150200250300350400
Results:%Recognition4 IDS98.4295.9195.0292.6791.6290.2589.9588.69
%False Positive4 IDS0.5714293.142862.476199.3571411.714316.142915.265319.7857
%False Negative4 IDS5033.3333303.3333320103.333336.66667
MinutesDetection Duration4 IDS6442333031273031
MinutesTraining Time4 IDS0.856.8520.5655.23112.76198.1346.12536.91
Users (8 IDS)50100150200250300350400
Results:%Recognition8 IDS95.9592.5188.5486.6785.3782.2581.3679.98
%False Positive8 IDS3.142868.4285718.571426.071428.114339.238140.734745.0714
%False Negative8 IDS26.666716.666716.6667013.33331000
MinutesDetection Duration8 IDS5328332728242718
MinutesTraining Time8 IDS0.261.775.8914.329.5649.7682.63126.37
IDSG
IDSsB
IDSsR
50 Users
200 Users
Legend
350 Users
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Users
Percentage
False Positive
000
000
000
000
000
000
000
000
Users
Percentage
False Negative
000
000
000
000
000
000
000
000
Users
Minutes
Training Time
000
000
000
000
000
000
000
000
Users
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Users
Percentage
Recognition
Exp Name:Resources
Description:The effect of increasing the number of resources
Details:Users:200
Resources:20, 40, 60, 80, 100, 120, 140, 160
IDSs:1, 2, 4, 8, 12, 16, 20, 24
Window:(10, 2400)
Sim Params:
Res (1 IDS)20406080100120140160
Results:%Recognition1 IDS71.7197.8999.1599.599.6599.7599.6799.68
%False Positive1 IDS46.21430.4285710.071428600000
%False Negative1 IDS13.333343.333366.666736.66677056.66677053.3333
MinuetsDetection Duration1 IDS1520222641272928
MinuetsTraining Time1 IDS133.23163.25216.45285.95361.87441.22546.48641.27
Res (4 IDSs)20406080100120140160
Results:%Recognition4 IDSs54.8279.0987.592.6796.3497.498.0698.78
%False Positive4 IDSs78.214344.214322.35719.357141.714290.6428570.4285710
%False Negative4 IDSs3.3333306.666673.333331013.333313.333316.6667
MinuetsDetection Duration4 IDSs2217263034313535
MinuetsTraining Time4 IDSs4.9916.4434.2555.2371.1386.25103.24111.88
Res (8 IDSs)20406080100120140160
Results:%Recognition8 IDSs50.8771.9779.286.6791.2993.1394.8895.81
%False Positive8 IDSs7860.714345.428626.07149.571437.428573.928572.35714
%False Negative8 IDSs006.666670106.6666713.333310
MinuetsDetection Duration8 IDSs1213222726323836
MinuetsTraining Time8 IDSs1.053.28.314.3221.6129.6539.0545.53
IDSG
IDSsB
IDSsR
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Resources
Percentage
False Positive
000
000
000
000
000
000
000
000
Resources
Percentage
False Negative
000
000
000
000
000
000
000
000
Resources
Minutes
Training Time
000
000
000
000
000
000
000
000
Resources
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Resources
Percentage
Recognition
Exp Name:Intruders
Description:The effect of increasing the number of intruders
Details:Users:200
Resources:80
IDSs:1, 4, 8
Window:(10, 2400)
Sim Params:
Intruders (1 IDS)510152025303540
Results:%Recognition1 IDS99.599.599.5599.5599.5399.599.599.56
%False Positive1 IDS00000000
%False Negative1 IDS46.666736.666786.666776.66677661.111176.190583.3333
MinuetsDetection Duration1 IDS3625302824253552
MinuetsTraining Time1 IDS278.05285.52282.3280.32281.6283.62292.25276.32
Intruders (4 IDS)510152025303540
Results:%Recognition4 IDSs92.7392.6793.2393.0792.9392.8792.9193.72
%False Positive4 IDSs8.071439.357146.2857188.428576.857147.642866.85714
%False Negative4 IDSs03.3333324.444411.666718.666722.222233.333330
MinuetsDetection Duration4 IDSs3030292830282847
MinuetsTraining Time4 IDSs52.3455.251.8354.7554.8754.5355.9150.02
Intruders (1 IDS)510152025303540
Results:%Recognition8 IDSs86.0186.6786.9586.9586.1386.2585.586.71
%False Positive8 IDSs27.071426.07142623.571425.714326.285728.642925.3571
%False Negative8 IDSs6.6666704.44444513.33338.8888914.285714.1667
MinuetsDetection Duration8 IDSs5427262427252830
MinuetsTraining Time8 IDSs13.0314.3313.3915.1315.2314.2215.113.6
IDSG
IDSsB
IDSsR
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
Intruders
Percentage
False Positive
000
000
000
000
000
000
000
000
Intruders
Percentage
False Negative
000
000
000
000
000
000
000
000
Intruders
Minutes
Training Time
000
000
000
000
000
000
000
000
Intruders
Minutes
Detection Duration
000
000
000
000
000
000
000
000
Intruders
Percentage
Recognition
1 IDS
4 IDSs
Legend
8 IDSs
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
000
000
000
000
000
000
000
000
IDSs
Percentage
False Positive
000
000
000
000
000
000
000
000
IDSs
Percentage
False Negative
000
000
000
000
000
000
000
000
IDSs
Minutes
Training Time
000
000
000
000
000
000
000
000
Resources
Percentage
False Positive
000
000
000
000
000
000
000
000
Users
Minutes
Training Time
000
000
000
000
000
000
000
000
Intruders
Percentage
False Negative
both
IDSs14W10W10900900
9009001010900900
Recognition99.4689.5799.4492.6699.9190.4
False Positive021.214308.5013.2857
False Negative36.6667046.66676.666677020
Detection Duration272429275342
Training Time286.2758.09288.0354.82211.2255.2
12001200202012001200
Recognition99.9592.8699.9697.5399.9792.72
False Positive06.928570005.85714
False Negative53.333323.33336066.666710030
Detection Duration41394044n/a38
Training Time227.5553.49227.2249.49198.8853.05
6006001010600600
Recognition99.3586.699.4492.6699.7386.61
False Positive034.928608.5030
False Negative43.3333046.66676.6666763.333310
Detection Duration271729274021
Training Time289.7861288.0354.8223159.25
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Chart4
510
2927
3540
4044
4643
5044
5341
5139
1 IDS
4 IDSs
Window Size
Minutes
Detection Duration
wFixed
Exp Name:wfixed
Description:The effect of increasing the window size
Details:Users:200
Resources:80
IDSs:1, 4
Window:5, 10, 15, 20, 25, 30, 35, 40
Sim Params:
n/a
wSize (1ids)510152025303540
Results:%Recognition1 IDS99.4499.999.9699.9899.98100100
%False Positive1 IDS0000000
%False Negative1 IDS46.666753.3333607076.66678096.6667
MinuetsDetection Duration1 IDS29354046505351
MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12
wSize (4ids)510152025303540
Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51
%False Positive4 IDSs51.28578.51.2142900.0714286000
%False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667
MinuetsDetection Duration4 IDSs1027404443444139
MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17
IDSG
IDSsR
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
wFixed
1 IDS
1 IDS
4 IDSs
4 IDSs
Main Title
wTime
1 IDS
4 IDSs
Window Size
Minutes
Training Time
wHybrid
1 IDS
4 IDSs
Window Size
Percentage
False Positive
IDSs
1 IDS
4 IDSs
Window Size
Percentage
False Negative
User
1 IDS
4 IDSs
Window Size
Minutes
Detection Duration
Res
1 IDS
4 IDSs
Window Size
Percentage
Recognition
Intruders
Exp Name:wTime
Description:The effect of increasing the window duration
Details:Users:200
Resources:80
IDSs:1, 4
Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100
Sim Params:
n/a
wTime (1ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100
%False Positive1 IDS0.2857140.1428570000000000000
%False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100
MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a
MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18
wTime (4ids)1002003004005006007008009001000110012001500180021002400
Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86
%False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714
%False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760
MinuetsDetection Duration4 IDSs12331218232134274239353839424240
MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8
IDSG
IDSsR
1 IDS
4 IDSs
Legend
&C&"Luxi Sans,Regular"&A
&C&"Luxi Sans,Regular"Page &P
Intruders
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Positive
Sheet8
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Percentage
False Negative
Sheet9
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Training Time
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Window Length (Sec.)
Minutes
Detection Duration
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0