1

POSEIDON: a 2-tier anomaly-based network intrusion detection system

We present POSEIDON, a new anomaly-based network intrusion detection system. POSEIDON is payload-based, and has a two-tier architecture: the first stage consists of a self-organizing map, while the second one is a modified PAYL system.

Damiano Bolzoni, Emmanuele Zambon, Sandro Etalle, Pieter Hartel