A Novel Algorithm for Intrusion Detection Based on RASL Model Checking

<table class="table-group" width="800px"><tr class="fig-image" id="a"><td><img alt="621203.fig.002a" src="https://static.hindawi.com/articles/mpe/volume-2013/621203/figures/621203.fig.002a.jpg"/></td></tr><tr class="fig-caption"><td align="center"><table><tr><td><b>(a) </b>Sequential relation <svg height="15.5375" id="M139" style="vertical-align:-3.27605pt" version="1.1" viewbox="0 0 72.449997 15.5375" width="72.449997" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g transform="matrix(.017,-0,0,-.017,.062,11.4)"><path d="M483 97q-42 -50 -88.5 -79.5t-68.5 -29.5q-37 0 -17 93l22 102h-2q-54 -79 -144 -149q-59 -46 -100 -46q-24 0 -43 29t-19 86q0 78 34.5 153t94.5 120q41 31 94 51.5t98 20.5q29 0 72 -9q26 -6 39 -6l2 -4q-30 -117 -67 -323q-8 -41 2 -41q16 0 79 58zM374 387
q-32 15 -73 15q-52 0 -83 -23q-48 -36 -78 -108.5t-30 -152.5q0 -33 8.5 -50.5t20.5 -17.5q31 0 107 79t99 132q15 40 29 126z" id="x1D44E"></path></g><g transform="matrix(.017,-0,0,-.017,13.373,11.4)"><path d="M535 323h-483v50h483v-50zM535 138h-483v50h483v-50z" id="x3D"></path></g><g transform="matrix(.017,-0,0,-.017,28.076,11.4)"><path d="M716 28l-8 -28h-254l8 28q55 5 66 17.5t5 47.5l-30 145h-232l-74 -138q-21 -43 -11 -54.5t72 -17.5l-6 -28h-235l8 28q53 7 73.5 21t53.5 70l319 540l33 8q6 -43 33 -176l80 -381q10 -49 26.5 -63t72.5 -19zM495 281l-49 264h-2l-149 -264h200z" id="x1D434"></path></g>
<g transform="matrix(.012,-0,0,-.012,40.55,15.475)"><path d="M384 0h-275v27q67 5 81.5 18.5t14.5 68.5v385q0 38 -7.5 47.5t-40.5 10.5l-48 2v24q85 15 178 52v-521q0 -55 14.5 -68.5t82.5 -18.5v-27z" id="x31"></path></g>
<g transform="matrix(.017,-0,0,-.017,46.875,11.4)"><path d="M95 130q31 0 61 -30t30 -78q0 -53 -38 -87.5t-93 -51.5l-11 29q77 31 77 85q0 26 -17.5 43t-44.5 24q-4 0 -8.5 6.5t-4.5 17.5q0 18 15 30t34 12z" id="x2C"></path></g><g transform="matrix(.017,-0,0,-.017,53.573,11.4)"><path d="M716 28l-8 -28h-254l8 28q55 5 66 17.5t5 47.5l-30 145h-232l-74 -138q-21 -43 -11 -54.5t72 -17.5l-6 -28h-235l8 28q53 7 73.5 21t53.5 70l319 540l33 8q6 -43 33 -176l80 -381q10 -49 26.5 -63t72.5 -19zM495 281l-49 264h-2l-149 -264h200z" id="x1D434"></path></g>
<g transform="matrix(.012,-0,0,-.012,66.05,15.475)"><path d="M412 140l28 -9q0 -2 -35 -131h-373v23q112 112 161 170q59 70 92 127t33 115q0 63 -31 98t-86 35q-75 0 -137 -93l-22 20l57 81q55 59 135 59q69 0 118.5 -46.5t49.5 -122.5q0 -62 -29.5 -114t-102.5 -130l-141 -149h186q42 0 58.5 10.5t38.5 56.5z" id="x32"></path></g>
</svg></td></tr></table></td></tr><tr class="fig-image" id="b"><td><img alt="621203.fig.002b" src="https://static.hindawi.com/articles/mpe/volume-2013/621203/figures/621203.fig.002b.jpg"/></td></tr><tr class="fig-caption"><td align="center"><table><tr><td><b>(b) </b>Concurrent relation <svg height="16.15" id="M140" style="vertical-align:-3.27605pt" version="1.1" viewbox="0 0 79.650002 16.15" width="79.650002" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g transform="matrix(.017,-0,0,-.017,.062,12.012)"><path d="M483 97q-42 -50 -88.5 -79.5t-68.5 -29.5q-37 0 -17 93l22 102h-2q-54 -79 -144 -149q-59 -46 -100 -46q-24 0 -43 29t-19 86q0 78 34.5 153t94.5 120q41 31 94 51.5t98 20.5q29 0 72 -9q26 -6 39 -6l2 -4q-30 -117 -67 -323q-8 -41 2 -41q16 0 79 58zM374 387
q-32 15 -73 15q-52 0 -83 -23q-48 -36 -78 -108.5t-30 -152.5q0 -33 8.5 -50.5t20.5 -17.5q31 0 107 79t99 132q15 40 29 126z" id="x1D44E"></path></g><g transform="matrix(.017,-0,0,-.017,13.373,12.012)"><path d="M535 323h-483v50h483v-50zM535 138h-483v50h483v-50z" id="x3D"></path></g><g transform="matrix(.017,-0,0,-.017,28.076,12.012)"><path d="M716 28l-8 -28h-254l8 28q55 5 66 17.5t5 47.5l-30 145h-232l-74 -138q-21 -43 -11 -54.5t72 -17.5l-6 -28h-235l8 28q53 7 73.5 21t53.5 70l319 540l33 8q6 -43 33 -176l80 -381q10 -49 26.5 -63t72.5 -19zM495 281l-49 264h-2l-149 -264h200z" id="x1D434"></path></g>
<g transform="matrix(.012,-0,0,-.012,40.55,16.087)"><path d="M384 0h-275v27q67 5 81.5 18.5t14.5 68.5v385q0 38 -7.5 47.5t-40.5 10.5l-48 2v24q85 15 178 52v-521q0 -55 14.5 -68.5t82.5 -18.5v-27z" id="x31"></path></g>
<g transform="matrix(.017,-0,0,-.017,51.6,12.012)"><path d="M162 -163h-61v866h61v-866z" id="x2223"></path></g><g transform="matrix(.017,-0,0,-.017,60.779,12.012)"><path d="M716 28l-8 -28h-254l8 28q55 5 66 17.5t5 47.5l-30 145h-232l-74 -138q-21 -43 -11 -54.5t72 -17.5l-6 -28h-235l8 28q53 7 73.5 21t53.5 70l319 540l33 8q6 -43 33 -176l80 -381q10 -49 26.5 -63t72.5 -19zM495 281l-49 264h-2l-149 -264h200z" id="x1D434"></path></g>
<g transform="matrix(.012,-0,0,-.012,73.25,16.087)"><path d="M412 140l28 -9q0 -2 -35 -131h-373v23q112 112 161 170q59 70 92 127t33 115q0 63 -31 98t-86 35q-75 0 -137 -93l-22 20l57 81q55 59 135 59q69 0 118.5 -46.5t49.5 -122.5q0 -62 -29.5 -114t-102.5 -130l-141 -149h186q42 0 58.5 10.5t38.5 56.5z" id="x32"></path></g>
</svg></td></tr></table></td></tr><tr class="fig-image" id="c"><td><img alt="621203.fig.002c" src="https://static.hindawi.com/articles/mpe/volume-2013/621203/figures/621203.fig.002c.jpg"/></td></tr><tr class="fig-caption"><td align="center"><table><tr><td><b>(c) </b>Time relation</td></tr></table></td></tr></table>

<table>Different relationship between behaviors in an attack <svg height="7.9499998" id="M138" style="vertical-align:-0.1638pt" version="1.1" viewbox="0 0 8.7250004 7.9499998" width="8.7250004" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g transform="matrix(.017,-0,0,-.017,.062,7.675)"><path d="M483 97q-42 -50 -88.5 -79.5t-68.5 -29.5q-37 0 -17 93l22 102h-2q-54 -79 -144 -149q-59 -46 -100 -46q-24 0 -43 29t-19 86q0 78 34.5 153t94.5 120q41 31 94 51.5t98 20.5q29 0 72 -9q26 -6 39 -6l2 -4q-30 -117 -67 -323q-8 -41 2 -41q16 0 79 58zM374 387
q-32 15 -73 15q-52 0 -83 -23q-48 -36 -78 -108.5t-30 -152.5q0 -33 8.5 -50.5t20.5 -17.5q31 0 107 79t99 132q15 40 29 126z" id="x1D44E"></path></g>
</svg>.</table>

Mathematical Problems in Engineering

fig2

Figure 2

Figure 2: A Novel Algorithm for Intrusion Detection Based on RASL Model Checking 