Anomaly detection IDS, sometimes, are designed to prevent mimicry attacks.

After the algorithm has done the clustering, there might be few and small clusters. The attacker will have problems with generating malicious samples that can be clustered as normal because it is more difficult for her/him to find the space where the "normal" clusters are.

What can be done to make a mimicry attack successful? How to put the malicious sample inside the normal clusters?

  • Is this a homework question? – schroeder Apr 22 '19 at 15:28
  • No. I have done data science in the past. But I am starting in cybersecurity. – Aizzaac Apr 22 '19 at 15:33
  • Ok, it's just written in a very different style than the rest of your posts. I'm seeing a lot of academic articles on the topic. – schroeder Apr 22 '19 at 15:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.