Fuzzy frequent episodes for real-time intrusion detection

Data mining methods including association rule mining and frequent episode mining have been applied to the intrusion detection problem. We describe an extension that uses fuzzy frequent episodes for near real-time intrusion detection. We first define fuzzy frequent episodes and then describe experiments that explore their applicability for real-time intrusion detection. Experimental results indicate that fuzzy frequent episodes can provide effective approximate anomaly detection