Collaborative Intrusion Detection

• Basis:

  • Spatial correlation: same attacker tries multiple hosts
  • Temporal correlation: many attackers try same attack at once
  • Statistic: > 100 failed attempts for every successful crack