APHRODITE: an Anomaly-based Architecture for False Positive Reduction

Damiano Bolzoni, Sandro Etalle

We present APHRODITE, an architecture designed to reduce false positives in network intrusion detection systems. APHRODITE works by detecting anomalies in the output traffic, and b…