Host scan detection simulation

Abstract

Port scanning is the phase of intelligence gathering and detected port scan usually means that the attacker is interestd in particular computer system and attempts to breach it. In this work host scan or sometimes called horizontal scan detection is addressed. Simulation model using Stochastic Activity Networks is suggested and used in this research. The results indicating the subordination of the detection efficiency on the time of detection are presented. The aim of the research is to find out parameters of efficient Intrusion Detection System for host scan detection.