58
Scientific Computing Department Faculty of Computer and Information Sciences Ain Shams University Supervised By: Mohammad F. Tolba Mohammad S. Abdel-Wahab Ismail A. Taha Presented By: Ahmad M. Al Shishtawy Security of Grid Computing Environments

Scientific Computing Department Faculty of Computer and Information Sciences Ain Shams University

Embed Size (px)

DESCRIPTION

Scientific Computing Department Faculty of Computer and Information Sciences Ain Shams University. Security of Grid Computing Environments. Supervised By: Mohammad F. Tolba Mohammad S. Abdel-Wahab Ismail A. Taha Presented By: Ahmad M. Al Shishtawy. Agenda. Introduction. - PowerPoint PPT Presentation

Citation preview

  • Scientific Computing DepartmentFaculty of Computer and Information SciencesAin Shams UniversitySupervised By:Mohammad F. TolbaMohammad S. Abdel-WahabIsmail A. Taha

    Presented By:Ahmad M. Al ShishtawySecurity of Grid Computing Environments

  • AgendaIntroduction.The Proposed Grid Intrusion Detection Architecture (GIDA).GIDA Implementation.Testing and Results.Conclusions and Future Work.Published Work.

  • Historical BackgroundMetacomputing.Grid computing coined in the late 1990s.Analogy to the electrical power grid.Ultimate goal:Make access to computational power as easy as access to electrical powerStill under research and development.

  • The Evolution of the GridPCThe InternetWANLANPCThe GridDistributedComputingClusterThe Internet (Sharing of Information):The Grid (Sharing of Computational Power):

  • CharacteristicsHeterogeneity.Scalability.Dynamicity or adaptability. Multiple administrative domains and autonomy.

  • RequirementsA Grid system should:Coordinate resources that are not subject to centralized control.Use standard, open, general-purpose protocols and interfaces.Deliver nontrivial Qualities of Service.

  • Grid Computing Current Efforts (Sample)Globus:www.globus.orgGridBus:www.gridbus.orgLegion:legion.virginia.eduUNICORE:www.unicore.org

  • The Grid Project DescriptionJoint project between:Ain Shams University in EgyptGeorge Washington University in USATest Project (Signature Verification).Goals:Understand Grid environments.Hands on practice.Master security related issues.

  • The Grid Scenario

  • The Grid Scenario

  • The Grid Scenario

  • The Grid Scenario

  • The Grid Scenario

  • The Grid Scenario

  • Basic Grid Services

  • Security ProblemsThe need to establish security relationship among hundreds of processes .(not simple client/server).The dynamic nature of the grid.Interdomain security solutions must interoperate with the diverse intradomain access control technologies

  • Security ProblemsBased on Public Key Infrastructure Private Keys can be stolen.Temporary Credentials poorly protectedNo protection from insiders.Software Bugs and Security Holes

  • Different Security LevelsFirewallPasswordAuthenticationAuthorization......

    IntrusionDetectionAttacksFirst LevelSecond LevelProtectedComputerSystem

  • Intrusion Detection SystemSecond line of defenseNormal differ from malicious use.Data Gathering:Host-based.Network-based.Analysis and Detection:Anomaly detection.Misuse detection.Centralized vs. Distributed detection.

  • Centralized Intrusion DetectionLANData gathering moduleAnalysis and Detection module

  • Distributed Intrusion DetectionAnalysis and Detection moduleData gathering module

  • Hierarchical Distributed Intrusion Detection LANLANLANLANData Analysis ModuleData Gathering ModuleIntrusion Detection Servers...............

  • AgendaIntroduction.The Proposed Grid Intrusion Detection Architecture (GIDA).GIDA Implementation.Testing and Results.Conclusions and Future Work.Published Work.

  • GoalProtect Grid resources from attacks that results from installing and using the Grid Infrastructure.Normal Internet attacks (that are not related to the Grid) are the responsibility of the local intrusion detection system at each domain.

  • Grid Intrusion Detection Architecture

    Intrusion Detection Agent (IDA)Data Gathering Module

    Intrusion Detection Server (IDS)Analysis and Detection ModuleCooperation Module

  • Proposed Grid Intrusion Detection Architecture (GIDA)

  • Data Gathering Module

  • Proposed Grid Intrusion Detection Architecture (GIDA)GISor DB

    GISor DBIDSIDS

  • Proposed Grid Intrusion Detection Architecture (GIDA)HeterogeneityScalabilityDynamicity or adaptabilityAutonomyNo centralized controlStandard protocolsNontrivial QoS

  • AgendaIntroduction.The Proposed Grid Intrusion Detection Architecture (GIDA).GIDA Implementation.Testing and Results.Conclusions and Future Work.Published Work.

  • GIDA ImplementationSimulated Grid environment.Simulated IDA.Host-based anomaly detection technique.Homogeneous IDSs with LVQ Neural Network.Simple cooperation with sharing results.

  • Why Simulation?No real Grid for testing (Expensive).Best for testing and evaluation new architectures.Control experiments in dynamic environment.

  • Grid SimulatorsMany Grid simulation tools (GridSim, SimGrid, MicroGrid, ).Unfortunately they concentrate on resource management problems.Develop our own simulator for security and intrusion detection based on GridSim.

  • The Simulated GridIDSIDSLogLogUsersIntrudersIntrusion Detection ServersGenerated Log Files. . .. . .Resources. . .. . .. . .Requests

  • GIDA ImplementationIDSIDSIDSPeer-to-peer Network or GISLogLogLog

  • Why LVQ?Similar to SOM and used for classification.Does not require anomalous records in training data.Classes and their labels (User Name) are known.

  • IDS Analyzing ModulePreprocessingTrained LVQDecision ModuleCooperation ModuleResponseAnalyzing and detection module

  • AgendaIntroduction.The Proposed Grid Intrusion Detection Architecture (GIDA).GIDA Implementation.Testing and Results.Conclusions and Future Work.Published Work.

  • Measured ParametersFalse Positive Percentage.False Negative Percentage.Recognition Rate.Training Time.Detection Duration

  • Tested IssuesControllable (Internal)Data PreprocessingNumber of IDSsUncontrollable (External)Number of UsersNumber of ResourcesNumber of Intruders

  • Different Types of Windows(Preprocessing)

  • Fixed Window Size

    Chart2

    551.2857

    08.5

    01.21429

    00

    00.0714286

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Positive

    wFixed

    Exp Name:wfixed

    Description:The effect of increasing the window size

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:5, 10, 15, 20, 25, 30, 35, 40

    Sim Params:

    n/a

    wSize (1ids)510152025303540

    Results:%Recognition1 IDS99.4499.999.9699.9899.98100100

    %False Positive1 IDS0000000

    %False Negative1 IDS46.666753.3333607076.66678096.6667

    MinuetsDetection Duration1 IDS29354046505351

    MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12

    wSize (4ids)510152025303540

    Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51

    %False Positive4 IDSs51.28578.51.2142900.0714286000

    %False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667

    MinuetsDetection Duration4 IDSs1027404443444139

    MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17

    IDSG

    IDSsR

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    wFixed

    0000

    0000

    0000

    0000

    0000

    0000

    0000

    0000

    1 IDS

    1 IDS

    4 IDSs

    4 IDSs

    Main Title

    wTime

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Training Time

    wHybrid

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Positive

    IDSs

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Negative

    User

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Detection Duration

    Res

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    Recognition

    Intruders

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100

    Sim Params:

    n/a

    wTime (1ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100

    %False Positive1 IDS0.2857140.1428570000000000000

    %False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100

    MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a

    MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18

    wTime (4ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86

    %False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714

    %False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760

    MinuetsDetection Duration4 IDSs12331218232134274239353839424240

    MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Intruders

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Positive

    Sheet8

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Negative

    Sheet9

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    Recognition

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:

    Sim Params:

    wHybrid (1ids) W1030060090012001500180021002400

    Results:%Recognition1 IDS98.1599.3599.4699.4999.4999.4999.4999.5

    %False Positive1 IDS0.07142860000000

    %False Negative1 IDS36.666743.333336.666736.666736.666736.666736.666736.6667

    MinuetsDetection Duration1 IDS2727273025262525

    MinuetsTraining Time1 IDS312289.78286.27286.05286.05285.67319.52285.32

    wHybrid (1ids) W2030060090012001500180021002400

    Results:%Recognition1 IDS98.2799.7699.999.9599.9699.9899.9799.96

    %False Positive1 IDS00000000

    %False Negative1 IDS5046.66676053.333366.666763.333363.333366.6667

    MinuetsDetection Duration1 IDS2837384134343735

    MinuetsTraining Time1 IDS286.47242.9230.2227.55226.3225.77261.07225.3

    wHybrid (1ids) W3030060090012001500180021002400

    Results:%Recognition1 IDS98.2699.7599.9499.9899.9999.9999.9899.98

    %False Positive1 IDS0.07142860000000

    %False Negative1 IDS53.333356.66677076.666783.3333808073.3333

    MinuetsDetection Duration1 IDS2742505150514752

    MinuetsTraining Time1 IDS285.13233.83216.85210.33207.03206.22226.93205.73

    wHybrid (4ids) W1030060090012001500180021002400

    Results:%Recognition4 IDSs77.9686.689.5791.0891.992.2392.5492.67

    %False Positive4 IDSs7534.928621.214314.57141211.42869.59.35714

    %False Negative4 IDSs00003.333333.3333303.33%

    MinuetsDetection Duration4 IDSs1117242628282830

    MinuetsTraining Time4 IDSs69.786158.0956.9656.2755.9664.2255.58

    wHybrid (4ids) W2030060090012001500180021002400

    Results:%Recognition4 IDSs77.7786.6990.6492.8694.3595.4396.1796.55

    %False Positive4 IDSs73.928630.857113.56.928573.928572.214291.142860.857143

    %False Negative4 IDSs06.666671023.33332026.666736.666726.6667

    MinuetsDetection Duration4 IDSs1222423942414241

    MinuetsTraining Time4 IDSs69.459.4455.4753.4952.7251.9658.1556.55

    wHybrid (4ids) W3030060090012001500180021002400

    Results:%Recognition4 IDSs77.7986.5890.4792.8494.4695.6596.3996.99

    %False Positive4 IDSs73.78573013.28575.928572.928571.857140.7857140.571429

    %False Negative4 IDSs01023.33333036.666733.333343.333346.6667

    MinuetsDetection Duration4 IDSs1220553742444144

    MinuetsTraining Time4 IDSs69.3859.4555.4253.3352.251.1557.850.35

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    Recognition

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    Recognition

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    Recognition

    Exp Name:IDSs:

    Description:The effect of increasing the number of IDSs

    Details:Users:200

    Resources:80

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    IDSs (50 users)124812162024

    Results:%Recognition50 User99.8499.4498.4295.9595.0694.2193.4693.07

    %False Positive50 User000.5714293.142865.142860.05714290.07142860.137143

    %False Negative50 User86.666756.66675026.666733.3333303026.6667

    MinuetsDetection Duration50 User30386452534845

    MinuetsTraining Time50 User6.852.620.880.260.140.090.060.06

    IDSs (200 users)124812162024

    Results:%Recognition200 User99.597.9392.6786.6783.7281.5180.8679.85

    %False Positive200 User00.7857149.3571426.071434.428643.546.071447.7857

    %False Negative200 User36.6667203.3333306.66667000

    MinuetsDetection Duration200 User2532302630232726

    MinuetsTraining Time200 User285.82141.8155.2514.355.972.961.921.19

    IDSs (350 users)124812162024

    Results:%Recognition350 User99.3696.9789.9781.3677.775.0974.5773.32

    %False Positive350 User01.3877615.142940.734754.081659.510262.653166.6939

    %False Negative350 User403.33333000000

    MinuetsDetection Duration350 User2435292622212322

    MinuetsTraining Time350 User1650.13826.93337.1881.0132.3215.039.585.93

    UsersG

    UsersB

    UsersR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    Recognition

    Exp Name:Users:

    Description:The effect of increasing the number of users

    Details:Users:50, 100, 150, 200, 250, 300, 350, 400

    Resources:80

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    n/a

    Users (1 IDS)50100150200250300350400

    Results:%Recognition1 IDS99.8499.7899.6499.599.4399.3299.36

    %False Positive1 IDS0000000

    %False Negative1 IDS86.666773.333376.666736.666776.666766.666790

    MinutesDetection Duration1 IDS31304025252624

    MinutesTraining Time1 IDS6.939.77119.92285.68569.021020.071706.37

    Users (4 IDS)50100150200250300350400

    Results:%Recognition4 IDS98.4295.9195.0292.6791.6290.2589.9588.69

    %False Positive4 IDS0.5714293.142862.476199.3571411.714316.142915.265319.7857

    %False Negative4 IDS5033.3333303.3333320103.333336.66667

    MinutesDetection Duration4 IDS6442333031273031

    MinutesTraining Time4 IDS0.856.8520.5655.23112.76198.1346.12536.91

    Users (8 IDS)50100150200250300350400

    Results:%Recognition8 IDS95.9592.5188.5486.6785.3782.2581.3679.98

    %False Positive8 IDS3.142868.4285718.571426.071428.114339.238140.734745.0714

    %False Negative8 IDS26.666716.666716.6667013.33331000

    MinutesDetection Duration8 IDS5328332728242718

    MinutesTraining Time8 IDS0.261.775.8914.329.5649.7682.63126.37

    IDSG

    IDSsB

    IDSsR

    50 Users

    200 Users

    Legend

    350 Users

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    Recognition

    Exp Name:Resources

    Description:The effect of increasing the number of resources

    Details:Users:200

    Resources:20, 40, 60, 80, 100, 120, 140, 160

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    Res (1 IDS)20406080100120140160

    Results:%Recognition1 IDS71.7197.8999.1599.599.6599.7599.6799.68

    %False Positive1 IDS46.21430.4285710.071428600000

    %False Negative1 IDS13.333343.333366.666736.66677056.66677053.3333

    MinuetsDetection Duration1 IDS1520222641272928

    MinuetsTraining Time1 IDS133.23163.25216.45285.95361.87441.22546.48641.27

    Res (4 IDSs)20406080100120140160

    Results:%Recognition4 IDSs54.8279.0987.592.6796.3497.498.0698.78

    %False Positive4 IDSs78.214344.214322.35719.357141.714290.6428570.4285710

    %False Negative4 IDSs3.3333306.666673.333331013.333313.333316.6667

    MinuetsDetection Duration4 IDSs2217263034313535

    MinuetsTraining Time4 IDSs4.9916.4434.2555.2371.1386.25103.24111.88

    Res (8 IDSs)20406080100120140160

    Results:%Recognition8 IDSs50.8771.9779.286.6791.2993.1394.8895.81

    %False Positive8 IDSs7860.714345.428626.07149.571437.428573.928572.35714

    %False Negative8 IDSs006.666670106.6666713.333310

    MinuetsDetection Duration8 IDSs1213222726323836

    MinuetsTraining Time8 IDSs1.053.28.314.3221.6129.6539.0545.53

    IDSG

    IDSsB

    IDSsR

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    Recognition

    Exp Name:Intruders

    Description:The effect of increasing the number of intruders

    Details:Users:200

    Resources:80

    IDSs:1, 4, 8

    Window:(10, 2400)

    Sim Params:

    Intruders (1 IDS)510152025303540

    Results:%Recognition1 IDS99.599.599.5599.5599.5399.599.599.56

    %False Positive1 IDS00000000

    %False Negative1 IDS46.666736.666786.666776.66677661.111176.190583.3333

    MinuetsDetection Duration1 IDS3625302824253552

    MinuetsTraining Time1 IDS278.05285.52282.3280.32281.6283.62292.25276.32

    Intruders (4 IDS)510152025303540

    Results:%Recognition4 IDSs92.7392.6793.2393.0792.9392.8792.9193.72

    %False Positive4 IDSs8.071439.357146.2857188.428576.857147.642866.85714

    %False Negative4 IDSs03.3333324.444411.666718.666722.222233.333330

    MinuetsDetection Duration4 IDSs3030292830282847

    MinuetsTraining Time4 IDSs52.3455.251.8354.7554.8754.5355.9150.02

    Intruders (1 IDS)510152025303540

    Results:%Recognition8 IDSs86.0186.6786.9586.9586.1386.2585.586.71

    %False Positive8 IDSs27.071426.07142623.571425.714326.285728.642925.3571

    %False Negative8 IDSs6.6666704.44444513.33338.8888914.285714.1667

    MinuetsDetection Duration8 IDSs5427262427252830

    MinuetsTraining Time8 IDSs13.0314.3313.3915.1315.2314.2215.113.6

    IDSG

    IDSsB

    IDSsR

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    Recognition

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Negative

    both

    IDSs14W10W10900900

    9009001010900900

    Recognition99.4689.5799.4492.6699.9190.4

    False Positive021.214308.5013.2857

    False Negative36.6667046.66676.666677020

    Detection Duration272429275342

    Training Time286.2758.09288.0354.82211.2255.2

    12001200202012001200

    Recognition99.9592.8699.9697.5399.9792.72

    False Positive06.928570005.85714

    False Negative53.333323.33336066.666710030

    Detection Duration41394044n/a38

    Training Time227.5553.49227.2249.49198.8853.05

    6006001010600600

    Recognition99.3586.699.4492.6699.7386.61

    False Positive034.928608.5030

    False Negative43.3333046.66676.6666763.333310

    Detection Duration271729274021

    Training Time289.7861288.0354.8223159.25

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Chart5

    582.67

    99.4492.66

    99.996.09

    99.9697.53

    99.9898.55

    99.9899.03

    10099.27

    10099.51

    1 IDS

    4 IDSs

    Window Size

    Percentage

    Recognition

    wFixed

    Exp Name:wfixed

    Description:The effect of increasing the window size

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:5, 10, 15, 20, 25, 30, 35, 40

    Sim Params:

    n/a

    wSize (1ids)510152025303540

    Results:%Recognition1 IDS99.4499.999.9699.9899.98100100

    %False Positive1 IDS0000000

    %False Negative1 IDS46.666753.3333607076.66678096.6667

    MinuetsDetection Duration1 IDS29354046505351

    MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12

    wSize (4ids)510152025303540

    Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51

    %False Positive4 IDSs51.28578.51.2142900.0714286000

    %False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667

    MinuetsDetection Duration4 IDSs1027404443444139

    MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17

    IDSG

    IDSsR

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    wFixed

    1 IDS

    1 IDS

    4 IDSs

    4 IDSs

    Main Title

    wTime

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Training Time

    wHybrid

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Positive

    IDSs

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Negative

    User

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Detection Duration

    Res

    1 IDS

    4 IDSs

    Window Size

    Percentage

    Recognition

    Intruders

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100

    Sim Params:

    n/a

    wTime (1ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100

    %False Positive1 IDS0.2857140.1428570000000000000

    %False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100

    MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a

    MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18

    wTime (4ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86

    %False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714

    %False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760

    MinuetsDetection Duration4 IDSs12331218232134274239353839424240

    MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Intruders

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Positive

    Sheet8

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Negative

    Sheet9

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    Recognition

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:

    Sim Params:

    wHybrid (1ids) W1030060090012001500180021002400

    Results:%Recognition1 IDS98.1599.3599.4699.4999.4999.4999.4999.5

    %False Positive1 IDS0.07142860000000

    %False Negative1 IDS36.666743.333336.666736.666736.666736.666736.666736.6667

    MinuetsDetection Duration1 IDS2727273025262525

    MinuetsTraining Time1 IDS312289.78286.27286.05286.05285.67319.52285.32

    wHybrid (1ids) W2030060090012001500180021002400

    Results:%Recognition1 IDS98.2799.7699.999.9599.9699.9899.9799.96

    %False Positive1 IDS00000000

    %False Negative1 IDS5046.66676053.333366.666763.333363.333366.6667

    MinuetsDetection Duration1 IDS2837384134343735

    MinuetsTraining Time1 IDS286.47242.9230.2227.55226.3225.77261.07225.3

    wHybrid (1ids) W3030060090012001500180021002400

    Results:%Recognition1 IDS98.2699.7599.9499.9899.9999.9999.9899.98

    %False Positive1 IDS0.07142860000000

    %False Negative1 IDS53.333356.66677076.666783.3333808073.3333

    MinuetsDetection Duration1 IDS2742505150514752

    MinuetsTraining Time1 IDS285.13233.83216.85210.33207.03206.22226.93205.73

    wHybrid (4ids) W1030060090012001500180021002400

    Results:%Recognition4 IDSs77.9686.689.5791.0891.992.2392.5492.67

    %False Positive4 IDSs7534.928621.214314.57141211.42869.59.35714

    %False Negative4 IDSs00003.333333.3333303.33%

    MinuetsDetection Duration4 IDSs1117242628282830

    MinuetsTraining Time4 IDSs69.786158.0956.9656.2755.9664.2255.58

    wHybrid (4ids) W2030060090012001500180021002400

    Results:%Recognition4 IDSs77.7786.6990.6492.8694.3595.4396.1796.55

    %False Positive4 IDSs73.928630.857113.56.928573.928572.214291.142860.857143

    %False Negative4 IDSs06.666671023.33332026.666736.666726.6667

    MinuetsDetection Duration4 IDSs1222423942414241

    MinuetsTraining Time4 IDSs69.459.4455.4753.4952.7251.9658.1556.55

    wHybrid (4ids) W3030060090012001500180021002400

    Results:%Recognition4 IDSs77.7986.5890.4792.8494.4695.6596.3996.99

    %False Positive4 IDSs73.78573013.28575.928572.928571.857140.7857140.571429

    %False Negative4 IDSs01023.33333036.666733.333343.333346.6667

    MinuetsDetection Duration4 IDSs1220553742444144

    MinuetsTraining Time4 IDSs69.3859.4555.4253.3352.251.1557.850.35

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    Recognition

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    Recognition

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    Recognition

    Exp Name:IDSs:

    Description:The effect of increasing the number of IDSs

    Details:Users:200

    Resources:80

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    IDSs (50 users)124812162024

    Results:%Recognition50 User99.8499.4498.4295.9595.0694.2193.4693.07

    %False Positive50 User000.5714293.142865.142860.05714290.07142860.137143

    %False Negative50 User86.666756.66675026.666733.3333303026.6667

    MinuetsDetection Duration50 User30386452534845

    MinuetsTraining Time50 User6.852.620.880.260.140.090.060.06

    IDSs (200 users)124812162024

    Results:%Recognition200 User99.597.9392.6786.6783.7281.5180.8679.85

    %False Positive200 User00.7857149.3571426.071434.428643.546.071447.7857

    %False Negative200 User36.6667203.3333306.66667000

    MinuetsDetection Duration200 User2532302630232726

    MinuetsTraining Time200 User285.82141.8155.2514.355.972.961.921.19

    IDSs (350 users)124812162024

    Results:%Recognition350 User99.3696.9789.9781.3677.775.0974.5773.32

    %False Positive350 User01.3877615.142940.734754.081659.510262.653166.6939

    %False Negative350 User403.33333000000

    MinuetsDetection Duration350 User2435292622212322

    MinuetsTraining Time350 User1650.13826.93337.1881.0132.3215.039.585.93

    UsersG

    UsersB

    UsersR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    Recognition

    Exp Name:Users:

    Description:The effect of increasing the number of users

    Details:Users:50, 100, 150, 200, 250, 300, 350, 400

    Resources:80

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    n/a

    Users (1 IDS)50100150200250300350400

    Results:%Recognition1 IDS99.8499.7899.6499.599.4399.3299.36

    %False Positive1 IDS0000000

    %False Negative1 IDS86.666773.333376.666736.666776.666766.666790

    MinutesDetection Duration1 IDS31304025252624

    MinutesTraining Time1 IDS6.939.77119.92285.68569.021020.071706.37

    Users (4 IDS)50100150200250300350400

    Results:%Recognition4 IDS98.4295.9195.0292.6791.6290.2589.9588.69

    %False Positive4 IDS0.5714293.142862.476199.3571411.714316.142915.265319.7857

    %False Negative4 IDS5033.3333303.3333320103.333336.66667

    MinutesDetection Duration4 IDS6442333031273031

    MinutesTraining Time4 IDS0.856.8520.5655.23112.76198.1346.12536.91

    Users (8 IDS)50100150200250300350400

    Results:%Recognition8 IDS95.9592.5188.5486.6785.3782.2581.3679.98

    %False Positive8 IDS3.142868.4285718.571426.071428.114339.238140.734745.0714

    %False Negative8 IDS26.666716.666716.6667013.33331000

    MinutesDetection Duration8 IDS5328332728242718

    MinutesTraining Time8 IDS0.261.775.8914.329.5649.7682.63126.37

    IDSG

    IDSsB

    IDSsR

    50 Users

    200 Users

    Legend

    350 Users

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    Recognition

    Exp Name:Resources

    Description:The effect of increasing the number of resources

    Details:Users:200

    Resources:20, 40, 60, 80, 100, 120, 140, 160

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    Res (1 IDS)20406080100120140160

    Results:%Recognition1 IDS71.7197.8999.1599.599.6599.7599.6799.68

    %False Positive1 IDS46.21430.4285710.071428600000

    %False Negative1 IDS13.333343.333366.666736.66677056.66677053.3333

    MinuetsDetection Duration1 IDS1520222641272928

    MinuetsTraining Time1 IDS133.23163.25216.45285.95361.87441.22546.48641.27

    Res (4 IDSs)20406080100120140160

    Results:%Recognition4 IDSs54.8279.0987.592.6796.3497.498.0698.78

    %False Positive4 IDSs78.214344.214322.35719.357141.714290.6428570.4285710

    %False Negative4 IDSs3.3333306.666673.333331013.333313.333316.6667

    MinuetsDetection Duration4 IDSs2217263034313535

    MinuetsTraining Time4 IDSs4.9916.4434.2555.2371.1386.25103.24111.88

    Res (8 IDSs)20406080100120140160

    Results:%Recognition8 IDSs50.8771.9779.286.6791.2993.1394.8895.81

    %False Positive8 IDSs7860.714345.428626.07149.571437.428573.928572.35714

    %False Negative8 IDSs006.666670106.6666713.333310

    MinuetsDetection Duration8 IDSs1213222726323836

    MinuetsTraining Time8 IDSs1.053.28.314.3221.6129.6539.0545.53

    IDSG

    IDSsB

    IDSsR

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    Recognition

    Exp Name:Intruders

    Description:The effect of increasing the number of intruders

    Details:Users:200

    Resources:80

    IDSs:1, 4, 8

    Window:(10, 2400)

    Sim Params:

    Intruders (1 IDS)510152025303540

    Results:%Recognition1 IDS99.599.599.5599.5599.5399.599.599.56

    %False Positive1 IDS00000000

    %False Negative1 IDS46.666736.666786.666776.66677661.111176.190583.3333

    MinuetsDetection Duration1 IDS3625302824253552

    MinuetsTraining Time1 IDS278.05285.52282.3280.32281.6283.62292.25276.32

    Intruders (4 IDS)510152025303540

    Results:%Recognition4 IDSs92.7392.6793.2393.0792.9392.8792.9193.72

    %False Positive4 IDSs8.071439.357146.2857188.428576.857147.642866.85714

    %False Negative4 IDSs03.3333324.444411.666718.666722.222233.333330

    MinuetsDetection Duration4 IDSs3030292830282847

    MinuetsTraining Time4 IDSs52.3455.251.8354.7554.8754.5355.9150.02

    Intruders (1 IDS)510152025303540

    Results:%Recognition8 IDSs86.0186.6786.9586.9586.1386.2585.586.71

    %False Positive8 IDSs27.071426.07142623.571425.714326.285728.642925.3571

    %False Negative8 IDSs6.6666704.44444513.33338.8888914.285714.1667

    MinuetsDetection Duration8 IDSs5427262427252830

    MinuetsTraining Time8 IDSs13.0314.3313.3915.1315.2314.2215.113.6

    IDSG

    IDSsB

    IDSsR

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    Recognition

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Negative

    both

    IDSs14W10W10900900

    9009001010900900

    Recognition99.4689.5799.4492.6699.9190.4

    False Positive021.214308.5013.2857

    False Negative36.6667046.66676.666677020

    Detection Duration272429275342

    Training Time286.2758.09288.0354.82211.2255.2

    12001200202012001200

    Recognition99.9592.8699.9697.5399.9792.72

    False Positive06.928570005.85714

    False Negative53.333323.33336066.666710030

    Detection Duration41394044n/a38

    Training Time227.5553.49227.2249.49198.8853.05

    6006001010600600

    Recognition99.3586.699.4492.6699.7386.61

    False Positive034.928608.5030

    False Negative43.3333046.66676.6666763.333310

    Detection Duration271729274021

    Training Time289.7861288.0354.8223159.25

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Chart1

    566.13

    288.0354.82

    247.5551.17

    227.2249.49

    214.8348.5

    206.5248

    206.1348.99

    196.1247.17

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Training Time

    wFixed

    Exp Name:wfixed

    Description:The effect of increasing the window size

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:5, 10, 15, 20, 25, 30, 35, 40

    Sim Params:

    n/a

    wSize (1ids)510152025303540

    Results:%Recognition1 IDS99.4499.999.9699.9899.98100100

    %False Positive1 IDS0000000

    %False Negative1 IDS46.666753.3333607076.66678096.6667

    MinuetsDetection Duration1 IDS29354046505351

    MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12

    wSize (4ids)510152025303540

    Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51

    %False Positive4 IDSs51.28578.51.2142900.0714286000

    %False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667

    MinuetsDetection Duration4 IDSs1027404443444139

    MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17

    IDSG

    IDSsR

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    wFixed

    0000

    0000

    0000

    0000

    0000

    0000

    0000

    0000

    1 IDS

    1 IDS

    4 IDSs

    4 IDSs

    Main Title

    wTime

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Training Time

    wHybrid

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Positive

    IDSs

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Negative

    User

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Detection Duration

    Res

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    Recognition

    Intruders

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100

    Sim Params:

    n/a

    wTime (1ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100

    %False Positive1 IDS0.2857140.1428570000000000000

    %False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100

    MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a

    MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18

    wTime (4ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86

    %False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714

    %False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760

    MinuetsDetection Duration4 IDSs12331218232134274239353839424240

    MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Intruders

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Positive

    Sheet8

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Negative

    Sheet9

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    Recognition

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:

    Sim Params:

    wHybrid (1ids) W1030060090012001500180021002400

    Results:%Recognition1 IDS98.1599.3599.4699.4999.4999.4999.4999.5

    %False Positive1 IDS0.07142860000000

    %False Negative1 IDS36.666743.333336.666736.666736.666736.666736.666736.6667

    MinuetsDetection Duration1 IDS2727273025262525

    MinuetsTraining Time1 IDS312289.78286.27286.05286.05285.67319.52285.32

    wHybrid (1ids) W2030060090012001500180021002400

    Results:%Recognition1 IDS98.2799.7699.999.9599.9699.9899.9799.96

    %False Positive1 IDS00000000

    %False Negative1 IDS5046.66676053.333366.666763.333363.333366.6667

    MinuetsDetection Duration1 IDS2837384134343735

    MinuetsTraining Time1 IDS286.47242.9230.2227.55226.3225.77261.07225.3

    wHybrid (1ids) W3030060090012001500180021002400

    Results:%Recognition1 IDS98.2699.7599.9499.9899.9999.9999.9899.98

    %False Positive1 IDS0.07142860000000

    %False Negative1 IDS53.333356.66677076.666783.3333808073.3333

    MinuetsDetection Duration1 IDS2742505150514752

    MinuetsTraining Time1 IDS285.13233.83216.85210.33207.03206.22226.93205.73

    wHybrid (4ids) W1030060090012001500180021002400

    Results:%Recognition4 IDSs77.9686.689.5791.0891.992.2392.5492.67

    %False Positive4 IDSs7534.928621.214314.57141211.42869.59.35714

    %False Negative4 IDSs00003.333333.3333303.33%

    MinuetsDetection Duration4 IDSs1117242628282830

    MinuetsTraining Time4 IDSs69.786158.0956.9656.2755.9664.2255.58

    wHybrid (4ids) W2030060090012001500180021002400

    Results:%Recognition4 IDSs77.7786.6990.6492.8694.3595.4396.1796.55

    %False Positive4 IDSs73.928630.857113.56.928573.928572.214291.142860.857143

    %False Negative4 IDSs06.666671023.33332026.666736.666726.6667

    MinuetsDetection Duration4 IDSs1222423942414241

    MinuetsTraining Time4 IDSs69.459.4455.4753.4952.7251.9658.1556.55

    wHybrid (4ids) W3030060090012001500180021002400

    Results:%Recognition4 IDSs77.7986.5890.4792.8494.4695.6596.3996.99

    %False Positive4 IDSs73.78573013.28575.928572.928571.857140.7857140.571429

    %False Negative4 IDSs01023.33333036.666733.333343.333346.6667

    MinuetsDetection Duration4 IDSs1220553742444144

    MinuetsTraining Time4 IDSs69.3859.4555.4253.3352.251.1557.850.35

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    Recognition

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    Recognition

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    Recognition

    Exp Name:IDSs:

    Description:The effect of increasing the number of IDSs

    Details:Users:200

    Resources:80

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    IDSs (50 users)124812162024

    Results:%Recognition50 User99.8499.4498.4295.9595.0694.2193.4693.07

    %False Positive50 User000.5714293.142865.142860.05714290.07142860.137143

    %False Negative50 User86.666756.66675026.666733.3333303026.6667

    MinuetsDetection Duration50 User30386452534845

    MinuetsTraining Time50 User6.852.620.880.260.140.090.060.06

    IDSs (200 users)124812162024

    Results:%Recognition200 User99.597.9392.6786.6783.7281.5180.8679.85

    %False Positive200 User00.7857149.3571426.071434.428643.546.071447.7857

    %False Negative200 User36.6667203.3333306.66667000

    MinuetsDetection Duration200 User2532302630232726

    MinuetsTraining Time200 User285.82141.8155.2514.355.972.961.921.19

    IDSs (350 users)124812162024

    Results:%Recognition350 User99.3696.9789.9781.3677.775.0974.5773.32

    %False Positive350 User01.3877615.142940.734754.081659.510262.653166.6939

    %False Negative350 User403.33333000000

    MinuetsDetection Duration350 User2435292622212322

    MinuetsTraining Time350 User1650.13826.93337.1881.0132.3215.039.585.93

    UsersG

    UsersB

    UsersR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    Recognition

    Exp Name:Users:

    Description:The effect of increasing the number of users

    Details:Users:50, 100, 150, 200, 250, 300, 350, 400

    Resources:80

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    n/a

    Users (1 IDS)50100150200250300350400

    Results:%Recognition1 IDS99.8499.7899.6499.599.4399.3299.36

    %False Positive1 IDS0000000

    %False Negative1 IDS86.666773.333376.666736.666776.666766.666790

    MinutesDetection Duration1 IDS31304025252624

    MinutesTraining Time1 IDS6.939.77119.92285.68569.021020.071706.37

    Users (4 IDS)50100150200250300350400

    Results:%Recognition4 IDS98.4295.9195.0292.6791.6290.2589.9588.69

    %False Positive4 IDS0.5714293.142862.476199.3571411.714316.142915.265319.7857

    %False Negative4 IDS5033.3333303.3333320103.333336.66667

    MinutesDetection Duration4 IDS6442333031273031

    MinutesTraining Time4 IDS0.856.8520.5655.23112.76198.1346.12536.91

    Users (8 IDS)50100150200250300350400

    Results:%Recognition8 IDS95.9592.5188.5486.6785.3782.2581.3679.98

    %False Positive8 IDS3.142868.4285718.571426.071428.114339.238140.734745.0714

    %False Negative8 IDS26.666716.666716.6667013.33331000

    MinutesDetection Duration8 IDS5328332728242718

    MinutesTraining Time8 IDS0.261.775.8914.329.5649.7682.63126.37

    IDSG

    IDSsB

    IDSsR

    50 Users

    200 Users

    Legend

    350 Users

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    Recognition

    Exp Name:Resources

    Description:The effect of increasing the number of resources

    Details:Users:200

    Resources:20, 40, 60, 80, 100, 120, 140, 160

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    Res (1 IDS)20406080100120140160

    Results:%Recognition1 IDS71.7197.8999.1599.599.6599.7599.6799.68

    %False Positive1 IDS46.21430.4285710.071428600000

    %False Negative1 IDS13.333343.333366.666736.66677056.66677053.3333

    MinuetsDetection Duration1 IDS1520222641272928

    MinuetsTraining Time1 IDS133.23163.25216.45285.95361.87441.22546.48641.27

    Res (4 IDSs)20406080100120140160

    Results:%Recognition4 IDSs54.8279.0987.592.6796.3497.498.0698.78

    %False Positive4 IDSs78.214344.214322.35719.357141.714290.6428570.4285710

    %False Negative4 IDSs3.3333306.666673.333331013.333313.333316.6667

    MinuetsDetection Duration4 IDSs2217263034313535

    MinuetsTraining Time4 IDSs4.9916.4434.2555.2371.1386.25103.24111.88

    Res (8 IDSs)20406080100120140160

    Results:%Recognition8 IDSs50.8771.9779.286.6791.2993.1394.8895.81

    %False Positive8 IDSs7860.714345.428626.07149.571437.428573.928572.35714

    %False Negative8 IDSs006.666670106.6666713.333310

    MinuetsDetection Duration8 IDSs1213222726323836

    MinuetsTraining Time8 IDSs1.053.28.314.3221.6129.6539.0545.53

    IDSG

    IDSsB

    IDSsR

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    Recognition

    Exp Name:Intruders

    Description:The effect of increasing the number of intruders

    Details:Users:200

    Resources:80

    IDSs:1, 4, 8

    Window:(10, 2400)

    Sim Params:

    Intruders (1 IDS)510152025303540

    Results:%Recognition1 IDS99.599.599.5599.5599.5399.599.599.56

    %False Positive1 IDS00000000

    %False Negative1 IDS46.666736.666786.666776.66677661.111176.190583.3333

    MinuetsDetection Duration1 IDS3625302824253552

    MinuetsTraining Time1 IDS278.05285.52282.3280.32281.6283.62292.25276.32

    Intruders (4 IDS)510152025303540

    Results:%Recognition4 IDSs92.7392.6793.2393.0792.9392.8792.9193.72

    %False Positive4 IDSs8.071439.357146.2857188.428576.857147.642866.85714

    %False Negative4 IDSs03.3333324.444411.666718.666722.222233.333330

    MinuetsDetection Duration4 IDSs3030292830282847

    MinuetsTraining Time4 IDSs52.3455.251.8354.7554.8754.5355.9150.02

    Intruders (1 IDS)510152025303540

    Results:%Recognition8 IDSs86.0186.6786.9586.9586.1386.2585.586.71

    %False Positive8 IDSs27.071426.07142623.571425.714326.285728.642925.3571

    %False Negative8 IDSs6.6666704.44444513.33338.8888914.285714.1667

    MinuetsDetection Duration8 IDSs5427262427252830

    MinuetsTraining Time8 IDSs13.0314.3313.3915.1315.2314.2215.113.6

    IDSG

    IDSsB

    IDSsR

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    Recognition

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Negative

    both

    IDSs14W10W10900900

    9009001010900900

    Recognition99.4689.5799.4492.6699.9190.4

    False Positive021.214308.5013.2857

    False Negative36.6667046.66676.666677020

    Detection Duration272429275342

    Training Time286.2758.09288.0354.82211.2255.2

    12001200202012001200

    Recognition99.9592.8699.9697.5399.9792.72

    False Positive06.928570005.85714

    False Negative53.333323.33336066.666710030

    Detection Duration41394044n/a38

    Training Time227.5553.49227.2249.49198.8853.05

    6006001010600600

    Recognition99.3586.699.4492.6699.7386.61

    False Positive034.928608.5030

    False Negative43.3333046.66676.6666763.333310

    Detection Duration271729274021

    Training Time289.7861288.0354.8223159.25

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Chart3

    50

    46.66676.66667

    53.333333.3333

    6066.6667

    7076.6667

    76.666790

    8086.6667

    96.666796.6667

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Negative

    wFixed

    Exp Name:wfixed

    Description:The effect of increasing the window size

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:5, 10, 15, 20, 25, 30, 35, 40

    Sim Params:

    n/a

    wSize (1ids)510152025303540

    Results:%Recognition1 IDS99.4499.999.9699.9899.98100100

    %False Positive1 IDS0000000

    %False Negative1 IDS46.666753.3333607076.66678096.6667

    MinuetsDetection Duration1 IDS29354046505351

    MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12

    wSize (4ids)510152025303540

    Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51

    %False Positive4 IDSs51.28578.51.2142900.0714286000

    %False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667

    MinuetsDetection Duration4 IDSs1027404443444139

    MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17

    IDSG

    IDSsR

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    wFixed

    0000

    0000

    0000

    0000

    0000

    0000

    0000

    0000

    1 IDS

    1 IDS

    4 IDSs

    4 IDSs

    Main Title

    wTime

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Training Time

    wHybrid

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Positive

    IDSs

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Negative

    User

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Detection Duration

    Res

    00

    00

    00

    00

    00

    00

    00

    00

    1 IDS

    4 IDSs

    Window Size

    Percentage

    Recognition

    Intruders

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100

    Sim Params:

    n/a

    wTime (1ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100

    %False Positive1 IDS0.2857140.1428570000000000000

    %False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100

    MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a

    MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18

    wTime (4ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86

    %False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714

    %False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760

    MinuetsDetection Duration4 IDSs12331218232134274239353839424240

    MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Intruders

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Positive

    Sheet8

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Negative

    Sheet9

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    Recognition

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:

    Sim Params:

    wHybrid (1ids) W1030060090012001500180021002400

    Results:%Recognition1 IDS98.1599.3599.4699.4999.4999.4999.4999.5

    %False Positive1 IDS0.07142860000000

    %False Negative1 IDS36.666743.333336.666736.666736.666736.666736.666736.6667

    MinuetsDetection Duration1 IDS2727273025262525

    MinuetsTraining Time1 IDS312289.78286.27286.05286.05285.67319.52285.32

    wHybrid (1ids) W2030060090012001500180021002400

    Results:%Recognition1 IDS98.2799.7699.999.9599.9699.9899.9799.96

    %False Positive1 IDS00000000

    %False Negative1 IDS5046.66676053.333366.666763.333363.333366.6667

    MinuetsDetection Duration1 IDS2837384134343735

    MinuetsTraining Time1 IDS286.47242.9230.2227.55226.3225.77261.07225.3

    wHybrid (1ids) W3030060090012001500180021002400

    Results:%Recognition1 IDS98.2699.7599.9499.9899.9999.9999.9899.98

    %False Positive1 IDS0.07142860000000

    %False Negative1 IDS53.333356.66677076.666783.3333808073.3333

    MinuetsDetection Duration1 IDS2742505150514752

    MinuetsTraining Time1 IDS285.13233.83216.85210.33207.03206.22226.93205.73

    wHybrid (4ids) W1030060090012001500180021002400

    Results:%Recognition4 IDSs77.9686.689.5791.0891.992.2392.5492.67

    %False Positive4 IDSs7534.928621.214314.57141211.42869.59.35714

    %False Negative4 IDSs00003.333333.3333303.33%

    MinuetsDetection Duration4 IDSs1117242628282830

    MinuetsTraining Time4 IDSs69.786158.0956.9656.2755.9664.2255.58

    wHybrid (4ids) W2030060090012001500180021002400

    Results:%Recognition4 IDSs77.7786.6990.6492.8694.3595.4396.1796.55

    %False Positive4 IDSs73.928630.857113.56.928573.928572.214291.142860.857143

    %False Negative4 IDSs06.666671023.33332026.666736.666726.6667

    MinuetsDetection Duration4 IDSs1222423942414241

    MinuetsTraining Time4 IDSs69.459.4455.4753.4952.7251.9658.1556.55

    wHybrid (4ids) W3030060090012001500180021002400

    Results:%Recognition4 IDSs77.7986.5890.4792.8494.4695.6596.3996.99

    %False Positive4 IDSs73.78573013.28575.928572.928571.857140.7857140.571429

    %False Negative4 IDSs01023.33333036.666733.333343.333346.6667

    MinuetsDetection Duration4 IDSs1220553742444144

    MinuetsTraining Time4 IDSs69.3859.4555.4253.3352.251.1557.850.35

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 10 (Sec.)

    Percentage

    Recognition

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 20 (Sec.)

    Percentage

    Recognition

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    False Positive

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    False Negative

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length at Size 30 (Sec.)

    Percentage

    Recognition

    Exp Name:IDSs:

    Description:The effect of increasing the number of IDSs

    Details:Users:200

    Resources:80

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    IDSs (50 users)124812162024

    Results:%Recognition50 User99.8499.4498.4295.9595.0694.2193.4693.07

    %False Positive50 User000.5714293.142865.142860.05714290.07142860.137143

    %False Negative50 User86.666756.66675026.666733.3333303026.6667

    MinuetsDetection Duration50 User30386452534845

    MinuetsTraining Time50 User6.852.620.880.260.140.090.060.06

    IDSs (200 users)124812162024

    Results:%Recognition200 User99.597.9392.6786.6783.7281.5180.8679.85

    %False Positive200 User00.7857149.3571426.071434.428643.546.071447.7857

    %False Negative200 User36.6667203.3333306.66667000

    MinuetsDetection Duration200 User2532302630232726

    MinuetsTraining Time200 User285.82141.8155.2514.355.972.961.921.19

    IDSs (350 users)124812162024

    Results:%Recognition350 User99.3696.9789.9781.3677.775.0974.5773.32

    %False Positive350 User01.3877615.142940.734754.081659.510262.653166.6939

    %False Negative350 User403.33333000000

    MinuetsDetection Duration350 User2435292622212322

    MinuetsTraining Time350 User1650.13826.93337.1881.0132.3215.039.585.93

    UsersG

    UsersB

    UsersR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    Recognition

    Exp Name:Users:

    Description:The effect of increasing the number of users

    Details:Users:50, 100, 150, 200, 250, 300, 350, 400

    Resources:80

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    n/a

    Users (1 IDS)50100150200250300350400

    Results:%Recognition1 IDS99.8499.7899.6499.599.4399.3299.36

    %False Positive1 IDS0000000

    %False Negative1 IDS86.666773.333376.666736.666776.666766.666790

    MinutesDetection Duration1 IDS31304025252624

    MinutesTraining Time1 IDS6.939.77119.92285.68569.021020.071706.37

    Users (4 IDS)50100150200250300350400

    Results:%Recognition4 IDS98.4295.9195.0292.6791.6290.2589.9588.69

    %False Positive4 IDS0.5714293.142862.476199.3571411.714316.142915.265319.7857

    %False Negative4 IDS5033.3333303.3333320103.333336.66667

    MinutesDetection Duration4 IDS6442333031273031

    MinutesTraining Time4 IDS0.856.8520.5655.23112.76198.1346.12536.91

    Users (8 IDS)50100150200250300350400

    Results:%Recognition8 IDS95.9592.5188.5486.6785.3782.2581.3679.98

    %False Positive8 IDS3.142868.4285718.571426.071428.114339.238140.734745.0714

    %False Negative8 IDS26.666716.666716.6667013.33331000

    MinutesDetection Duration8 IDS5328332728242718

    MinutesTraining Time8 IDS0.261.775.8914.329.5649.7682.63126.37

    IDSG

    IDSsB

    IDSsR

    50 Users

    200 Users

    Legend

    350 Users

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Percentage

    Recognition

    Exp Name:Resources

    Description:The effect of increasing the number of resources

    Details:Users:200

    Resources:20, 40, 60, 80, 100, 120, 140, 160

    IDSs:1, 2, 4, 8, 12, 16, 20, 24

    Window:(10, 2400)

    Sim Params:

    Res (1 IDS)20406080100120140160

    Results:%Recognition1 IDS71.7197.8999.1599.599.6599.7599.6799.68

    %False Positive1 IDS46.21430.4285710.071428600000

    %False Negative1 IDS13.333343.333366.666736.66677056.66677053.3333

    MinuetsDetection Duration1 IDS1520222641272928

    MinuetsTraining Time1 IDS133.23163.25216.45285.95361.87441.22546.48641.27

    Res (4 IDSs)20406080100120140160

    Results:%Recognition4 IDSs54.8279.0987.592.6796.3497.498.0698.78

    %False Positive4 IDSs78.214344.214322.35719.357141.714290.6428570.4285710

    %False Negative4 IDSs3.3333306.666673.333331013.333313.333316.6667

    MinuetsDetection Duration4 IDSs2217263034313535

    MinuetsTraining Time4 IDSs4.9916.4434.2555.2371.1386.25103.24111.88

    Res (8 IDSs)20406080100120140160

    Results:%Recognition8 IDSs50.8771.9779.286.6791.2993.1394.8895.81

    %False Positive8 IDSs7860.714345.428626.07149.571437.428573.928572.35714

    %False Negative8 IDSs006.666670106.6666713.333310

    MinuetsDetection Duration8 IDSs1213222726323836

    MinuetsTraining Time8 IDSs1.053.28.314.3221.6129.6539.0545.53

    IDSG

    IDSsB

    IDSsR

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    Recognition

    Exp Name:Intruders

    Description:The effect of increasing the number of intruders

    Details:Users:200

    Resources:80

    IDSs:1, 4, 8

    Window:(10, 2400)

    Sim Params:

    Intruders (1 IDS)510152025303540

    Results:%Recognition1 IDS99.599.599.5599.5599.5399.599.599.56

    %False Positive1 IDS00000000

    %False Negative1 IDS46.666736.666786.666776.66677661.111176.190583.3333

    MinuetsDetection Duration1 IDS3625302824253552

    MinuetsTraining Time1 IDS278.05285.52282.3280.32281.6283.62292.25276.32

    Intruders (4 IDS)510152025303540

    Results:%Recognition4 IDSs92.7392.6793.2393.0792.9392.8792.9193.72

    %False Positive4 IDSs8.071439.357146.2857188.428576.857147.642866.85714

    %False Negative4 IDSs03.3333324.444411.666718.666722.222233.333330

    MinuetsDetection Duration4 IDSs3030292830282847

    MinuetsTraining Time4 IDSs52.3455.251.8354.7554.8754.5355.9150.02

    Intruders (1 IDS)510152025303540

    Results:%Recognition8 IDSs86.0186.6786.9586.9586.1386.2585.586.71

    %False Positive8 IDSs27.071426.07142623.571425.714326.285728.642925.3571

    %False Negative8 IDSs6.6666704.44444513.33338.8888914.285714.1667

    MinuetsDetection Duration8 IDSs5427262427252830

    MinuetsTraining Time8 IDSs13.0314.3313.3915.1315.2314.2215.113.6

    IDSG

    IDSsB

    IDSsR

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Minutes

    Detection Duration

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    Recognition

    1 IDS

    4 IDSs

    Legend

    8 IDSs

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Percentage

    False Negative

    000

    000

    000

    000

    000

    000

    000

    000

    IDSs

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Resources

    Percentage

    False Positive

    000

    000

    000

    000

    000

    000

    000

    000

    Users

    Minutes

    Training Time

    000

    000

    000

    000

    000

    000

    000

    000

    Intruders

    Percentage

    False Negative

    both

    IDSs14W10W10900900

    9009001010900900

    Recognition99.4689.5799.4492.6699.9190.4

    False Positive021.214308.5013.2857

    False Negative36.6667046.66676.666677020

    Detection Duration272429275342

    Training Time286.2758.09288.0354.82211.2255.2

    12001200202012001200

    Recognition99.9592.8699.9697.5399.9792.72

    False Positive06.928570005.85714

    False Negative53.333323.33336066.666710030

    Detection Duration41394044n/a38

    Training Time227.5553.49227.2249.49198.8853.05

    6006001010600600

    Recognition99.3586.699.4492.6699.7386.61

    False Positive034.928608.5030

    False Negative43.3333046.66676.6666763.333310

    Detection Duration271729274021

    Training Time289.7861288.0354.8223159.25

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Chart4

    510

    2927

    3540

    4044

    4643

    5044

    5341

    5139

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Detection Duration

    wFixed

    Exp Name:wfixed

    Description:The effect of increasing the window size

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:5, 10, 15, 20, 25, 30, 35, 40

    Sim Params:

    n/a

    wSize (1ids)510152025303540

    Results:%Recognition1 IDS99.4499.999.9699.9899.98100100

    %False Positive1 IDS0000000

    %False Negative1 IDS46.666753.3333607076.66678096.6667

    MinuetsDetection Duration1 IDS29354046505351

    MinuetsTraining Time1 IDS288.03247.55227.22214.83206.52206.13196.12

    wSize (4ids)510152025303540

    Results:%Recognition4 IDSs82.6792.6696.0997.5398.5599.0399.2799.51

    %False Positive4 IDSs51.28578.51.2142900.0714286000

    %False Negative4 IDSs06.6666733.333366.666776.66679086.666796.6667

    MinuetsDetection Duration4 IDSs1027404443444139

    MinuetsTraining Time4 IDSs66.1354.8251.1749.4948.54848.9947.17

    IDSG

    IDSsR

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    wFixed

    1 IDS

    1 IDS

    4 IDSs

    4 IDSs

    Main Title

    wTime

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Training Time

    wHybrid

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Positive

    IDSs

    1 IDS

    4 IDSs

    Window Size

    Percentage

    False Negative

    User

    1 IDS

    4 IDSs

    Window Size

    Minutes

    Detection Duration

    Res

    1 IDS

    4 IDSs

    Window Size

    Percentage

    Recognition

    Intruders

    Exp Name:wTime

    Description:The effect of increasing the window duration

    Details:Users:200

    Resources:80

    IDSs:1, 4

    Window:100, 200, 300, 400, 500, 600, 700, 800, 900, 1000, 1100

    Sim Params:

    n/a

    wTime (1ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition1 IDS96.0598.2499.1999.5399.7399.8799.999.9199.9899.9799.9710010099.99100

    %False Positive1 IDS0.2857140.1428570000000000000

    %False Negative1 IDS33.33335063.333353.333363.33337060709080100100100100100

    MinuetsDetection Duration1 IDS22263338404951535055n/an/an/an/an/a

    MinuetsTraining Time1 IDS331.15284.82259.58242.92231222.68216.27211.22227.42202.5198.88193186.85199.77182.18

    wTime (4ids)1002003004005006007008009001000110012001500180021002400

    Results:%Recognition4 IDSs57.427177.7681.8484.5586.6188.0989.3290.491.2992.1592.7294.395.5996.2296.86

    %False Positive4 IDSs99.428691.573.553.285739.85713022.785717.714313.285710.07148.214295.857142.857141.50.9285710.285714

    %False Negative4 IDSs000010102026.66672026.6667303036.666733.333346.666760

    MinuetsDetection Duration4 IDSs12331218232134274239353839424240

    MinuetsTraining Time4 IDSs94.577.3869.264.6661.659.2557.6856.4955.262.853.9153.0551.8950.7659.4349.8

    IDSG

    IDSsR

    1 IDS

    4 IDSs

    Legend

    &C&"Luxi Sans,Regular"&A

    &C&"Luxi Sans,Regular"Page &P

    Intruders

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Positive

    Sheet8

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Percentage

    False Negative

    Sheet9

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Training Time

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    Window Length (Sec.)

    Minutes

    Detection Duration

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    00

    0