METHODOLOGY FOR CREATING A DATABASE OF COMPUTER ATTACK CLASSIFICATIONS BASED ON THE USE OF INTELLIGENT ANALYSIS OF COMPUTER ATTACK SIGNATURES
The structure of a typical computer attack detection system based on a database of computer attack signatures is presented. A conceptual model of the system for detecting computer attacks using data mining has been developed, which is based on the use of signature, behavioral and intelligent analysis of information security events. An approach of data mining is proposed, which consists in training on the basis of existing signatures of computer attacks in order to further form a database of classifications of computer attacks. The method of forming a database of computer attacks based on the use of intelligent analysis of computer attack signatures is developed.