Anomaly detection schemes in network intrusion del ection

Intrusion detection corresponds to a suite af techniques that are used to identify attacks againts computers and network infrastructure. Anomaly deteciion is a key element of intrusion detection in wich perturbations of normal behavior suggest the presence of intentionally or unintentionally induced attacks. The major benefit of anomaly detection algorithms is their ability to potentially detect unforeseen attacks. In this paper we provide state of the-art review in the area of' novelty detection based on data mining techniques. Discussed is the various models effectiveness and their specific shortcomings, as well as the difficulty anamoly detection general.