Multi-Level Distributional Entropy from Flow Summary Statistics for Explainable Network Intrusion Detection

Mohamed Aly Bouke, Md Shohel Sayeed, Swee-Huay Heng +2

Machine learning network intrusion detection systems (IDS) operate on aggregate flow statistics that discard the distributional structure of traffic, and although information-theor…