Research Article

A Novel Algorithm for Intrusion Detection Based on RASL Model Checking

Table 3

A comparison of different MC-based approaches for detecting telnet attacks.

Attack actions detection results (if attacks are found)ITL [2]RASL LTL [1]

Make a backdoor after/before/while close firewallYesYesNo
There exists an/no overlap timed interval between two actionsYesYesNo
The time distance between two actions is less than secondsNoYesNo