A Novel Algorithm for Intrusion Detection Based on RASL Model Checking

<table>Comparisons of average number of attacks found by different MC-based approaches (<svg height="7.9499998" id="M315" style="vertical-align:-0.1638pt" version="1.1" viewbox="0 0 9.625 7.9499998" width="9.625" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g transform="matrix(.017,-0,0,-.017,.062,7.675)"><path d="M536 404q0 -17 -13.5 -31.5t-26.5 -14.5q-8 0 -15 10q-11 14 -25 14q-22 0 -67 -50q-47 -52 -68 -82l37 -102q31 -88 55 -88t78 59l16 -23q-32 -48 -68.5 -78t-65.5 -30q-19 0 -37.5 20t-29.5 53l-41 116q-72 -106 -114.5 -147.5t-79.5 -41.5q-21 0 -34.5 14t-13.5 37
q0 16 13.5 31.5t28.5 15.5q12 0 17 -11q5 -10 25 -10q22 0 57.5 36t89.5 111l-40 108q-22 58 -36 58q-21 0 -67 -57l-19 20q81 107 125 107q17 0 30 -22t39 -88l22 -55q68 92 108.5 128.5t74.5 36.5q20 0 32.5 -14t12.5 -30z" id="x1D465"></path></g>
</svg>: the number of kinds of simulation attacks and <svg height="12.175" id="M316" style="vertical-align:-3.56265pt" version="1.1" viewbox="0 0 9.9624996 12.175" width="9.9624996" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g transform="matrix(.017,-0,0,-.017,.062,7.675)"><path d="M556 393q0 -39 -36 -106q-42 -78 -185 -279q-47 -66 -81 -108t-117 -135l-112 -26l-8 22q150 90 251 219q-6 136 -39 340q-8 53 -21 53q-6 0 -27 -19.5t-38 -42.5l-16 26q80 111 127 111q23 0 35 -28t20 -90q18 -137 27 -263h2q142 200 142 279q0 24 -14 48q-4 7 5 26
q13 28 43 28q18 0 30 -15.5t12 -39.5z" id="x1D466"></path></g>
</svg>: the different number of kinds of attacks found by the different simulators). (a) For telnet attacks. (b) For p-trace attacks.</table>

Mathematical Problems in Engineering

fig6

Figure 6

Figure 6: A Novel Algorithm for Intrusion Detection Based on RASL Model Checking 