Maximum entropy and payload based intrusion detection system the Me-PAYL

In this work a payload based intrusion detection system by using the maximum entropy principle, the Me-PAYL is proposed. A network anomaly detection technique that uses sniffed data of network and based on maximum entropy and relative entropy methods is developed. Advantages of the maximum entropy approach are combined with PAYL [1] model to obtain more efficiency. The proposed method, Me-PAYL is tested with DARPA 1999 intrusion detection evaluation (IDEVAL) dataset, which is the largest dataset available with whole payloads [2].