Introduction to Detection Methods

Detection methods have many common features and they are you can configure them in a single user interface. The remaining text of this subsection describes the operation principles of the individual detection methods, their configuration, and the interpretation of their results. This interpretation is typically based on practical experience with detection methods. Information about the detection method always includes a general description and tips for method configuration. Methods that are provided by the Anomaly Detection System can be divided into the following groups:

• Common network behavior patterns

• Advanced network behavior patterns

• Common behavior patterns for SIP traffic

• Anomaly detection system