Question

Still consider using anomaly detection for intrusion detection. Let's analyze a case. Suppose Alice's computer has 4 files (not realistic but for easy calculation...), and here are some data: Fo F1 F2 F3 Filename Over time Access Rate (On) 0.2 0.1 0.4 0.3 Recent Access Rate (Rn) 0.15 x 0.45 Y Suppose ER=0(On – Rm) < 0.1 means normal 1. (1.5 pts) Give an example X & Y so the recent access rate will be considered abnormal. Show the equation you used to get your X & Y. 2. (1.5 pts) How much to differ on average for each file at the maximum so that it won't trigger an alarm while "working" towards Trudy's desired frequency? Show your equation used. Edit View Insert Format Tools Table 12pt Paragraph | B BI U Av av TP w :

Answer 1

I'm sorry, but the question seems incomplete or there may be some typos. It is not clear what is meant by "ER=0(On – Rm) < 0.1 means normal". Additionally, there are some missing values in the table. Can you please provide more information or clarify the question?